VP Senior Security Analyst

Company: Eastern Bank
Location: Lynn, MA
Posted on: August 17, 2017

Job Description:

Maintain Information Security standards and key controls, ensuring

adherence to policy frameworks. Research and evaluate emerging threats, and

ensure that logs are being collected appropriately. Provide guidance on

logging, monitoring and alerting. Stay current with latest attack vectors

and security trends in the industry and translate to operational action

items. Identify and track incidents, track resolution in incident

management tracking system. Work with 3rd party managed security services

providers to develop improved system monitoring and correlation rules to

improve overall security posture. Provide periodic reporting related to

incidents and events. Be “on call” as needed for security incidents.

Review critical changes to the system architecture affecting security.

Develop and support a Data Loss Prevention (DLP) strategy. Assist the

Information Security Officer in the tasks related to risk assessments and

vendor control assessments. Validate compliance with enterprise standards

and policies. Assist in collecting and analyzing information and controls

related to risk assessments and vendor reviews. Review user access rights

relating to employee access, terminations and transfers.

Requirements:

Master's degree in Computer Science, Information Assurance, Information

Systems, Engineering or related field (willing to accept foreign education

equivalent) plus three (3) years’ experience performing security and risk

assessments.

Must have:

• Demonstrated expertise applying NIST frameworks and regulatory

compliance standards, and developing cloud security frameworks;

• Demonstrated expertise utilizing FireEye Advanced Threat Detection,

Tenable vulnerability management, and Security Incident Management (SIEM)

solutions;

• Demonstrated expertise performing security reviews, system architecture

reviews, and risk assessments for technology solutions;

• Demonstrated expertise in the software development life cycle (SDLC)

applying OWASP security standards, using application security tools and

code scanning software including Veracode to assess and improve the

security of applications; and

• Demonstrated expertise architecting and implementing identity

management solution.

Keywords: Eastern Bank, Boston , VP Senior Security Analyst, Finance , Lynn, MA, Massachusetts