Security Compliance Analyst

Security Compliance Analyst

Position Summary:

·  Periodically review systems and networks for compliance with Bank IT security policies and standards.

·  Participate in the definition of key security compliance metrics and compile and report on those metrics.

·  Assist in the development of security policies and procedures and monitor compliance with them.

·  Maintain knowledge of new security threats, vulnerabilities, and industry solutions; as well as security technology trends and advances within the Bank.  Advise management as to how these threats can effect information assets.

·  Maintain knowledge of current and evolving regulatory requirements effecting security compliance.

·  Assist with risk assessments related to Bank security.

·  Use software tools to gather information on the Bank’s security posture, monitor compliance with Bank security standards, and identify security incidents across all Bank technology platforms.

·  Work in a self-directed manner on resolving identified information security and compliance gaps.  Partner with IT and business unit management as appropriate to resolve such compliance gaps.

·  Coordinate third party security compliance assessment activities (i.e. threat and vulnerability scans) and coordinate resolution of compliance gaps.

·  Provide consultation on projects regarding information security compliance requirements for existing and future deliverables.

·  Participate in the development and implementation of security incident response plans.

Minimum Qualifications:

·  Bachelor’s degree in Information Systems or related field or an equivalent combination of education and work experience.

·  Industry certification or eligibility preferred (e.g. CISSP, CISA, CISM).

·  A minimum of 5 years experience in information security or a combination of information security and IT Audit or related discipline.

·  Strong working knowledge of information security best practices and standards.

·  Knowledge of control activities in the areas of:  change management, computer operations, database administration, information security administration, network security, operating system security, and web application security.

·  Knowledge of data query, analysis, and scanning tools and techniques.

·  Strong written, oral, and analytical skills.

·  Ability to manage multiple priorities, coordinate work assignments with management throughout the organization, and reliably meet commitments.

·  Strong aptitude for technology and an ability to learn quickly.

Only those applicants who include their salary requirements will be considered for this position.

The Federal Home Loan Bank of Pittsburgh is an Equal Opportunity Employer and takes employment action without regard to race, religion, color, sex, national origin, age, disability, veteran’s status, ancestry, or sexual preference.