Information Security Operations

Looking to make a meaningful impact on your community? At Connex Credit Union, we’re seeking passionate and diverse individuals who are driven to help improve the financial well-being of others.

At Connex, you’re more than an employee, you’re part of a team that values trust, collaboration, and delivering exceptional service. With a strong history of success and a commitment to our employees, members, and communities, we continue to grow while creating opportunities for our team members to thrive.

If you’re looking for a rewarding career where you can make a difference, grow professionally, and be part of an inclusive organization, we encourage you to join us on our mission.

What we offer:

• Competitive compensation
• Medical, Dental, and Vision coverage
• Paid time off
• 401(k) plan with company match
• Tuition reimbursement opportunities
• Opportunities to participate in community outreach and make a local impact

Join a team where your work matters and your contributions make a difference.

We are seeking a dynamic and motivated individual to join our team as the Information Security Operations Leader. The Information Security Operations Leader is a hands-on leadership role that is responsible for the design, performance, planning, budgeting, securing, monitoring, and integration of Cybersecurity initiatives across Connex. You will play a crucial role in refining and creating processes related to the Risk Management Framework (RMF), threat/vulnerability analysis, penetration testing, and reporting exercises. Your primary objective is to enhance Connex’s cybersecurity capabilities and incident threat response processes to ensure they meet company requirements and industry standards. 

As the Information Security Operations Leader, you will be responsible for safeguarding the organization's information systems and data assets. You will play a key role in implementing and maintaining security measures to protect against cyber threats, ensuring the confidentiality, integrity, and availability of their systems.

Essential Functions and Responsibilities:

• Deliver on cybersecurity initiatives at the credit union. Coordinates with internal teams and external vendors to ensure the cybersecurity resilience of the credit union is tested frequently.
• Oversees audits and evaluations of the cybersecurity environment. Manages the planning, documentation, testing, integration, and execution of cybersecurity projects including annual budgeting and coordination of vendor responsibilities.
• Conduct risk assessments, analyze security controls, and provide recommendations for improvements.
• Assist in the development and maintenance of our Risk Management Framework (RMF) processes and documentation.
• Collaborate with the internal teams and external vendors to assess, document, and authorize information systems using the RMF.
• Develop and implement information security policies, procedures, and standards.
• Monitor and defend our systems against cyber threats. Provide incident detection, analysis, and response, helping to improve our overall security posture.
• Participate in conducting regular vulnerability assessments and penetration tests on our IT infrastructure, applications, and networks.
• Provide support in identifying vulnerabilities, reporting findings, and assisting with remediation efforts.
• Provide support in analyzing security incidents and breaches. Monitor security logs and respond to security incidents in a timely manner.
• Proactively search for threats and vulnerabilities within our environment. Conduct incident handling and coordination, ensuring a rapid and effective response to security events.
• Ensure that all cybersecurity activities are conducted in accordance with government policies, standards, and requirements relevant to national security systems.
• Collaborate with IT and development teams to integrate security measures into the design and implementation of systems.
• Maintain accurate records of all activities, including findings, actions taken, and recommendations for improvement.
• Contribute to the development of reports and documentation related to cybersecurity exercises.
• Stay informed about the latest security threats, technologies, trends and best practices.
• Conduct security awareness training for employees.
• Design and implement security controls for networks, systems, and applications.
• Security Policies: Establish and enforce security policies, procedures, and guidelines to protect digital assets, sensitive trade data, and intellectual property.
• Risk Management: Conduct regular risk assessments and vulnerability scans to identify and address potential risks and develop risk mitigation plans to safeguard the organization against cyber threats and vulnerabilities. Be responsible for the business fraud investigation and mitigation.
• Incident Response: Create and maintain an effective incident response plan, ensuring timely and efficient recovery from security breaches and disruptions.
• Incident Investigation and Forensics: Carry out thorough research and investigation on security incidents. Work with internal teams and external vendors to conduct research and forensics.
• Regulatory Compliance: Ensure compliance with all related regulatory bodies.
• Security Awareness: Develop and oversee a security awareness program to educate employees, members, and stakeholders about best practices in cybersecurity.
• Vendor Security: Evaluate and monitor the security practices of third-party vendors, partners, and service providers.
• Stakeholder Collaboration: Collaborate with internal and external stakeholders, such as customs authorities, shipping partners, and regulatory bodies, to ensure security standards and trade compliance.
• Reporting: Provide regular reports and updates to executive management and the board of directors on the state of cybersecurity and compliance.

Performance Measurements (if applicable):

• Establish reasonable timeframes for completion of all projects and tasks and completes projects and tasks within that timeframe.
• Ensure clean audits or audit resolutions within departmental service metrics.
• Maintains service desk response(s) to departmental service metrics.
• Ensures clean annual disaster recovery testing and responds to disasters according to departmental service metrics.
• Oversees day to day monitoring and management of cybersecurity projects, tools, technologies and vendors and responds to incidents and issues in a timely and thorough fashion.
• Anticipates system and network risks and assures adequate safeguards.
• Works collaboratively and effectively with other teams and departments.

Qualifications and Requirements:

• Bachelor's or Master's degree in Information Security, Computer Science, or equivalent and appropriate work experience.
• Industry-recognized certifications, such as CISSP, CISM, or CISA.
• Knowledge of threat/vulnerability analysis, penetration testing, and red-team/blue-team exercises.
• Excellent communication and teamwork skills.
• Ability to learn quickly and adapt to new technologies and methodologies.
• Exceptional attention to detail and the ability to work accurately.
• A collaborative mindset and willingness to work with colleagues to achieve shared goals.
• Proven experience as an Information Security Engineer or similar role.
• Strong knowledge of information security principles and best practices.
• Experience with security technologies, including firewalls, IDS/IPS, antivirus, and encryption.
• Familiarity with security frameworks and compliance standards (e.g., ISO 27001, NIST, GDPR).
• Hands-on experience with security tools and technologies. 
• Proven experience in a leadership role in information security, with at least 5-8 years of relevant experience.
• Strong understanding of banking/credit union operations, regulatory requirements, and financial procedures.
• In-depth knowledge of cybersecurity technologies, tools, and best practices.
• Exceptional communication and leadership skills.
• Ability to adapt to a dynamic environment and make critical decisions under pressure.
• Experience with artificial intelligence (AI) and machine learning (ML) security.
• Experience with DevOps and security automation.
• Experience with security awareness training and education.
• Experience evaluating and managing cyber risk and working within industry-standard frameworks (e.g. NIST Cybersecurity Framework, CIS Top 20, NIST 800-XX, etc.)
• Knowledgeable of methodologies such as Cyber Kill Chain and Diamond Model of Intrusion Analysis models.
• Experience with cloud computing, networks, servers, operating systems and PCs is mandatory.
• Experience with ATM/ITM networks is preferred.
• Ability to solve complex analytical and/or project related problems.
• Lifting boxes up to 50 lbs.
• On call after hours.