Information Security Analyst - Portland

Information Security Analyst - Portland

Information Security Analyst - Portland

Job Type: Full-Time
Location: Portland, OR
Last Updated: 01/29/2013


Job Description:
MAJOR RESPONSIBILITIES
Provide consultation, guidance, and risk assessment related to confidentiality, integrity, and availability of information throughout the organization. Participates with project teams in the development of secure networks, systems and applications. Consults as an information security subject-matter expert throughout the lifecycle of technology and business projects. Conducts and documents information security risk assessment and third-party risk assessments. Collects and analyzes information regarding controls and risks, and presents analysis to a wide variety of stakeholders in writing and in person. Develops content and manages security awareness activities for customers and associates. Performs activities to identify and remediate system vulnerabilities. Responds to information security incidents.
Demonstrates compliance with all bank regulations for assigned job function and as applies to designated job responsibilities - knowledge may be gained through coursework and on-the-job training. Keeps up-to-date on regulation changes. Follows all Bank policies and procedures, compliance regulations, and completes all required annual or job-specific training. Actively learns, demonstrates, and fosters the Umpqua corporate culture in all actions and words. Takes personal initiative and is a positive example for others to emulate. Embraces our vision to become The World's Greatest Bank."
Information Security Analyst - Performs and coordinates information security workflow as assigned. Work activities may include performing third-party information security reviews, conducting surveys and data management in the information security risk assessment (ISRA) program, and participating in moderate to high-complexity information technology projects to ensure that enterprise risk assessments include a consideration of information security. Analyzes information systems to evaluate key controls and residual risk. Performs testing of controls for design and operating effectiveness to assess risk. May participate as an information security subject matter expert in technology management processes, including change management, problem management, vulnerability management, and patch management.
QUALIFICATIONS:
. Generally 1 - 3 years experience in information security, IT audit, or information technology operations.
. Bachelor''s degree with an emphasis in Management Information Systems, Computer Science, Accounting, Business or a related discipline preferred.
. Skilled in information technology, including: operating systems, networking, application architecture, and malware prevention controls.
. Working knowledge of bank operations and regulatory expectations.
. Previous experience and knowledge of risk management processes including internal audit and information security management. Experience evaluating controls relative to information security frameworks such as ISO 27002, NIST 800 series, or financial services regulatory frameworks such as the FFIEC IT booklets.
. Excellent customer relationship and time management skills.
. Solid verbal and written communication skills.
. Proficiency with personal computers and related software packages such as Word and Excel.
. At least one of the following certifications is preferred: CISSP, CISM, CIPP, CFE, CISA or SANS GIAC. If not already maintained, expected to obtain certification CISSP certification within 6 months of hire.
PHYSICAL REQUIREMENTS & WORKING CONDITIONS
Work involves sitting, occasional walking, and lifting up to 50 pounds.
Requires close visual acuity.
Normal office environment.
No relocation offered.
We are proud to be an EEO/AA employer M/F/D/V. We maintain a drug-free workplace and may perform pre-employment substance abuse testing.