Information Security Analyst II - IAM Analyst

Primary Purpose

The IAM Analyst defines, analyzes, supports, tests and administers business-related technology within a budgeted time
frame and cost that will meet departmental requirements by providing access to bank systems. Works with Business
Partners to understand and compile data and design the report specifications to match the requirements. Able to
translate complex business requirements and concepts into structured reporting. Assists with user access reviews,
vendor due diligence, and monitors the ticketing system to distribute work to the team and ensure completion. This
position also participates in small teams on assignments to accomplish project goals.
This position will be required to perform necessary job duties in a manner that reflects and supports best-in-class
service. The importance of accuracy, timeliness and attention to detail is vital to the successful and accurate processing
of data requests. Candidates must be able to set priorities and organize requests received throughout the workday.
Additional attributes required for success include a strong customer service focus, professionalism, versatile product and
process subject matter expertise, responsive, takes ownership, effective communicator, risk aware and good judgment.

Principal Duties and Responsibilities
* Resolve incoming access requests.
* GLBA reviews of critical applications including risk and control documentation in conjunction with other IS
members. This is understanding data protection compliance as it relates to Gramm_Leach-Biley Act (GLBA)
* Monitor security systems along with relevant reports and logs from critical systems, conduct inquiries and
escalate anomalies for further investigation as necessary.
* Develop data extracts to be used for reporting and reviews. These can range from metric reporting to answering
audit and exam reviews.
* Liaise with other reporting areas within the Bank.
* Assist with monthly due diligence on current vendors and for new vendors as needed.
* Maintain current procedures and document new processes as needed.
* Responsible for alerting management to security issues and making recommendations for resolution.
* Identify and communicate process/procedure improvement opportunities to management.
* Participate in other assignments as directed by the CISO (Chief Information Security Officer) or the IAM
Manager.
* Identify ABAC (Attribute based access controls) / RBAC (Role based access controls) opportunities

* Support the Governance Risk Management program including controls, data quality, security risk reduction, and
regulatory compliance
* Ability to effectively present information and respond to questions from peers and leadership

Job Specifications

EDUCATION:
* Bachelors Degree in Information Security, or a related field.
* Security based certifications preferred

EXPERIENCE:
* Information Security background, preferred.
* Identity and Access Management, preferred.
* Collaboration software (i.e. Microsoft suite, Google workspace, etc)

Knowledge and skills:
* Working knowledge in data and system security techniques and tools.
* Understand and apply knowledge of info security principles and best practices in review of security
configurations as it applies to this role.