Officer, Senior Information Security Engineer
- Santa Ana, CA
- $100,000-150,000 per year
- Permanent
- Full-time
- Builds, supports, monitors and enforces the security posture of the Bank using next-gen firewall, IDS/IPS, endpoint protection, DLP, encryption, SIEM, vulnerability management and other technologies and processes.
- Conducts / coordinates security control audits, identifies potential gaps/risks and participates in the remediation of same.
- Establishes and maintains Security Operations team triage and incident response playbooks to protect and recover information assets from unauthorized access, modification or destruction.
- Assist in developing and implementing technical security standards to support the Bank’s security needs and regulatory requirements including ISO2700x, CFPB, SOX, GLBA, NIST, FFIEC and PCI.
- Provide subject matter expertise in all areas of Information Security technical operations, including analysis of computing environment, security testing and documentation, as well as investigations, software research, emerging technology research, vendor security analysis and participation in periodic audits.
- Execute a reliable first-line-of defense via documented processes, controls, templates, and rigors.
- Evaluate effectiveness of security testing and training, including penetration testing, security awareness training, and phishing campaigns.
- Keeps abreast of the latest security and privacy legislation, regulations, advisories, alerts, and vulnerabilities pertaining to the Bank, and modify security control structure as required.
- Maintains advanced knowledge and awareness of information security trends within the financial industry.
- High level of personal integrity, the ability to professionally handle confidential matters, and project the appropriate level of urgency, judgment, and maturity.
- Treat people with respect; keep commitments; inspire the trust of others; work ethically and with integrity; uphold organizational values; accept responsibility for own actions.
- Demonstrates knowledge of and adherence to EEO policy; shows respect and sensitivity for cultural differences; educates others on the value of diversity; promotes working environment free of harassment of any type; builds a diverse workforce and supports affirmative action.
- Follows policies and procedures; completes tasks correctly and on time; supports the company’s goals and values.
- Performs the position safely, without endangering the health or safety to themselves or others and will be expected to report potentially unsafe conditions. The employee shall comply with occupational safety and health standards and all rules, regulations and orders issued pursuant to the OSHA Act of 1970, which are applicable to one’s own actions and conduct.
- Performs other duties and projects as assigned.
- Demonstrates knowledge of, adherence to, monitoring and responsibility for compliance with state and federal regulations and laws as they pertain to this position including but not limited to the following: Regulation Z (Truth in Lending Act), Regulation B (Equal Credit Opportunity Act), Fair Housing Act (FHA), Home Mortgage Disclosure Act (HMDA), Real Estate Settlement Procedures Act (RESPA), Fair Credit Reporting Act (FCRA), Bank Secrecy Act (BSA) in conjunction with the USA PATRIOT Act, Anti-Money Laundering (AML) and Customer Information Program (CIP), Right to Financial Privacy Act (RFPA, state and federal) and Community Reinvestment Act (CRA).
- Security generalist, someone that thrives in fast-paced environments with diverse technologies, but can dive deep on your domain(s) expertise.
- Interested in solving security challenges through partnership, technical awareness and assurance.
- Adept at influence and driving change within the organization.
- Self-starter with a hands-on style, a high level of energy, stamina and drive.
- Able to present ideas clearly and gain agreement and group consensus.
- Strong team player.
- Ability to work with little to no supervision while performing duties
- Bachelor's Degree, Information Systems, Computer Science, Information Security or related field desired.
- Security Operations experience in financial services, healthcare, or other highly-regulated sector desired.
- 5+ years IT security or Information Security experience with a proven ability to engage with business units and technical peers.
- Experience and knowledge of Palo Alto firewalls
- Highschool diploma or equivalent required
- Financial Security: You will be eligible to participate in the company’s 401k plan which includes a company match and immediate vesting.
- Health & Well-Being: We offer comprehensive insurance options including medical, dental, vision, AD&D, supplemental life, long-term disability, pre-tax Health Savings Account with employer contributions, and pre-tax Flexible Spending Account (FSA).
- Building & Supporting Your Family: Banc of California partners with providers that offer adoption, surrogacy, and fertility assistance as well as paid parental leave and family support solutions including care options for your family.
- Paid Time Away: Eligible team members receive paid vacation days, holidays, and volunteer time off.
- Career Growth Opportunities: To support career growth of our team members, we offer tuition reimbursement, an annual mentorship program, leadership development resources, access to LinkedIn Learning, and more.