***THIS JOB REQUIRES ADVANCE ENGLISH LEVEL SKILLS. WRITTEN AND CONVERSATIONAL ENGLISH IS A MUST***
Summary
Processing Center located in Panama City (Financial District) is looking for an IS Technology Analyst. The IS Technology Analyst is responsible for strategizing and executing policies and procedures and subsidiary that support and advance the information security program.
The IS Technology Analyst is also responsible for evaluating security needs based on ISO/IEC 27001:2013 and current industry trends and evaluating client compliance obligations for use in implementing effective security controls.
This position requires strong partnership and collaboration with the various lines of businesses and functional areas, such as IT, GRC, and upper management, while simultaneously observing the independence of the information security function.
The IS Technology Analyst will serve as the Information Security point of contact for technical issues regarding security guidance. This entails establishing a cycle of mandatory activities (SLAs) and ensuring compliance (e.g. DR Testing, proper certifications [ISO], etc.) as well as identifying emerging issues and standards and attending various risk & compliance meetings to ensure requirements are being met.
The IS Technology Analyst will receive, review, and digest client information security and physical security requirements, as well as reviewing contracts with third parties to ensure compliance with minimum IT requirements.
Essential Duties and Responsibilities:
· Assist with day to day Information Security activities including monitoring, compliance and standardization.
· Evaluate company security needs based on ISO/IEC, NIST, and current industry trends.
· Create, maintain and implement various security policies and procedures in conjunction with the Compliance Committee.
· Assist with the creation, maintenance, and testing of Business Continuity Plans and Business Impact Assessments, updating testing schedules for applications and processes, etc.
· Assist with the creation, maintenance, and implementation of a vulnerability management program using industry standard vulnerability management software.
· Handle routine information security tasks such as participation in change management, enforcement of password change schedules, and employee access reviews.
· Serve as an information security point of contact for technical issues requiring security guidance.
· Provide secure code reviews for in-house applications. Assess and recommend configuration guidelines for LAMP stack deployments.
· Detect and review new security threats and vulnerabilities and create contingency plans.
· Review policies for specific controls and test controls against policies.
· Assist clients with questionnaires related to Information Technology or Information Security.
· Provide audit support via telephone or on site as requested.
Knowledge, Skills and Abilities:
· Professional, positive attitude
· Creative problem-solving capabilities
· Reliable, organized and attentive to detail
· Customer Service focused
· Ability to prioritize and manage multiple tasks
· Excellent written and verbal communication skills
· Proficient computer and internet skills including the Microsoft Office Suite of applications
· Excellent time management and prioritization skills including ability to meet deadlines, work under pressure, and resolve specific problems within stated deadlines
· Knowledge of industry concepts an asset. Mortgage banking or legal experience in related field beneficial
· Establish effective working relationships at all levels of the organization, possess the ability to manage upward and downward.
· Analytical, detail-oriented, flexible, and decisive
· Strong level of influence and negotiation skills
· Strong skills to obtain answers with guidance
· Able to exercise effective judgment, sensitivity and creativity to changing needs and situations
Training and Experience:
· BS in IT security a plus
· Security Certifications a plus
· Proficient computer and internet skills including the Microsoft Office Suite of applications
· Three (3) years or more of practical experience in auditing or Information Technology
