It Security Support Specialist - Corporate It Security - Firstbank Pr

IT Security Support Specialist

Corporate IT Security

FIRSTBANK PR

Job Summary

The Corporate Security Office (CSO) is accountable for the corporate strategy regarding Information Security, which includes the creation and maintenance of policies, procedures, and program for all Regions. The IT Security Support Specialist will act as a dedicated resource within the Region to support the Unit Manager to ensure that information security goals and objectives are achieved successfully.

The IT Security Support Specialist is responsible for assisting the Unit Manager in identifying, mitigating, and responding to Information Security risks in the Region. As part of the functions, this role will conduct Information Security tasks such as employee onboarding and access granting.

Essential Responsibilities

Technical Functions:

Perform day to day access provisioning functions for the Region and ensures Access Request Forms submitted by the Human Resources area and business units are processed in accordance.

Performs the user access revision process and ensures user access roles and definitions are in accordance with Access Request Forms and job functions.

Ensures user access requests documentation is properly filed/ scanned and kept up to date.

Maintain defined SLA metrics within ticketing systems at satisfactory levels.

Monitors the timely de-activation of terminated and transferred employees in Active Directory and all applicable applications.

Provide Help Desk support as a Tier 2 including after regular working hours on scheduled program.

Configure systems security policies to comply with security standards or user requirements.

Oversight / Governance functions:

· Support the Unit Manager with IS monitoring metrics such as KRIs/Scorecards/Dashboards. Such as:

· Assists in Detecting risks as a part of early warning system.

· Communicate any underlining risk and potential impact to the business

· Assists IT Security to provide a backward-looking view on risk events, so lessons can be learned from the past.

· Supports the Unit Manager with preparing and maintaining IS Self-Assessments to identify potential information security risks.

· Supports in special projects and research, when needed, as it relates to Corporate Security.

· Provide support reviewing IT Security Controls and provide follow ups and effective monitoring process.

· Assist the Unit Manager as necessary to respond and mitigate cybersecurity risks for internal control improvement

Other Responsibilities

· Provides recommendations on business requirements, practice, and compliance to ensure the Corporation’s Information Security strategy, regulatory compliance, and continuity requirements are met.

· Performs other related functions as needed.

·Accountable for adhering to the Bank’s BSA, AML and Office of Foreign Asset Control (OFCA) applicable policies. Employee must follow specific unit procedures developed in compliance with the policies. Employee is also responsible for reporting any suspicious activity and/or transactions in accordance with the Bank’s processes and comply with any mandatory BSA, AML and OFAC training assigned.

Independence of Judgment

The degree of judgment is related to the integration and coordination of varied elements and its application to specific subjects; the identification and definition of new problems of moderate complexity; and the continuous analysis of specialized and complex subjects.

Is also related to the compilation and/or presentation of information; data processing and/or presentation of possible recommendations; integration and coordination of varied elements and its application to specific subjects; identification and definition of new problems of moderate complexity; and continuous analysis of specialized and complex subjects.

Supervisory Responsibilities

This position does not have any direct supervisory responsibilities.

Impact of Errors

The impact of errors of this position could affect other department activities and strategic results or Bank image through the regulatory agencies, customers and the community. The impact of errors of this position could also affect the essential activities for the Bank, either from other divisions or departments, or within.

Competencies

Knowledge of:

· The utilization, operation and care of computer and related electronic data processing equipment.

· Able to manage computers and related hardware devices.

· Proficient IT skills, business knowledge, and people skills (need a balance among the three set of skills to be able to leverage these skills to effectively interact at all levels successfully)

·Proficient Information Security and/or Information Technology knowledge.

·Proficient knowledge of Information Security Frameworks such as COBIT 5, ISO 27000, NIST among others

·Strong knowledge in IT Controls and how to comply with control objectives

·Focused on learning new technologies to keep up with current industry technologies and standards.

·The competencies detailed below are the behaviors to be exhibited by the incumbent while performing his/her duties as relates to our corporate values, culture and philosophy.

Minimum Requirements

· A Bachelor’s degree in, Information Systems or Computer Science related field, and at least three (3) years of experience in a similar job is required, or equivalent combination of education and experience sufficient to successfully perform the essential functions of the job is required.

· Previous experience in the information technology and information security regulations and guidelines, as well as the information technology frameworks (SOX, GLBA, BSA, FFIEC Guidelines, PCI DSS).

· Experience in the information security field

· Security +, SSCP or CISM certifications are not required, but desirable.

Disclaimer

The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not indented to be an exhaustive list of all responsibilities, duties, skills required of personnel so classified. The reporting relationship may not reflect the most recent changes to the corporate reporting structure.

EQUAL EMPLOYMENT OPPORTUNITY EMPLOYER