Information Security Officer

Information Security OfficerHarwood Heights, ILSome Responsibilities/Tasks:Monitor access to all systems and maintains access control profiles on computer network and systems. Track documentation of access authorizations to all resources.Install, modify, enhance and maintain data system security software.Work on determining acceptable risk levels for the enterprise and ensuring the IT environments are adequately protected from potential risks and threats.Participate in development and implementation of the appropriate and effective controls to mitigate identified threats and risks.Assist in the research, development, communication, maintaining and working with the operational units on the enforcement of IT security architecture, policies, procedures, solutions and standards.Oversee incident response planning as well as the investigation of security breaches, and assist with disciplinary and legal matters associated with such breaches as necessarySupport improved data security awareness and education including on-call availability.Responsible for staying abreast of the latest industry security practices and technologiesMeet with Senior Management to analyze, document and define requirements associated with new development or maintenance and enhancements to existing security roles and permissions. Review completed roles/permissions with users to ensure requirements are fully met.Deliver services that meet regulatory specifications.

Work with internal and external auditors to document and confirm that all security administrative duties are properly performed as well as demonstrate overall compliance.Performs additional related duties as assigned by management.Job Qualifications:A Bachelor's degree in computer science or related fieldMinimum 8+ years of progressive experience in information Security and banking industryMust have experience with business continuity planning, auditing, and risk management, as well as contract and vendor negotiation.In-depth knowledge and experience in the following information security areas:Information security assessment and auditing procedures, from both technical and business perspectives, and the use of formal methodologies such as NSA IAMVulnerability scanning and auditing toolsEnterprise-scale network and host-based IDS architecturesE-commerce application securityComputer investigation and forensics methods and technologiesStrong Knowledge of regulatory bodies, and the regulations and guidance issued by these bodies, overseeing banks, credit unions, and financial services organizations, such as the FDIC, FinCEN, Client Board, Office of Thrift Supervision, and NCUA.Strong knowledge of privacy laws, such as GLBA, SB1386, SOX