Security Specialist

Job description

It's fun to work in a company where people truly BELIEVE in what they're doing! We're committed to bringing passion and customer focus to the business. The Security Specialist I participates in, and in some cases facilitates, various information and/or security processes and projects across the enterprise. Job responsibilities span various skill areas including: system hardening and configuration management, policy and procedure drafting, the provisioning of training and awareness, responding to security incidents, and supplying detailed security process metrics to senior management. Essential Duties and Responsibilities Participates in the ongoing deployment of patches and anti-virus to the enterprise environment. Participates in the configuration and monitoring of information and/or physical security tools, as well as the underlying output (e.g., log management appliance, anti-virus management engine, core banking monitoring appliances, web usage, DVRs, cameras, alarms, door access panels, track packs, etc.) to mitigate cyber threats and ensures the ongoing production of alerts and reports. Participates in the development and ongoing maintenance of the risk assessment and disaster recovery processes, and maintains the associated application and infrastructure lists. Participates in the annual review and development of security policies, procedures, and associated training and awareness activities. Participates in the development and maintenance of an enterprise wide security controls matrix and monitoring of control performance, and responds to associated audit and examination evidence requests. Participates in the leveraging of analytic tools to prepare various reports from aggregated security tool outputs. Participates in the development of workflows and processes to support security processes such as disaster recovery testing, incident response, access provisioning, and annual review processes. Investigates suspicious incidents and policy violations, and maintains appropriate law enforcement and departmental contact to support investigations. Participates in new installations, upgrades, configuration and monitoring of security tools and equipment to mitigate vulnerabilities, cyber threats and to ensure the ongoing production of alerts and reports, and interacts with service providers to ensure service levels are maintained. Ensures that all departmental documents and activities are performed in compliance with applicable laws, regulations, policies and procedures as applicable to this position, including completion of required compliance training. Performs other duties and responsibilities as assigned. Qualifications To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Skills Ability to read and comprehend simple instructions, short correspondence, and memos Ability to read and interpret documents such as procedure manuals, general business correspondence and/or journals or government regulations Ability to write simple-to-business correspondence, routine reports, and procedures. Ability to read, analyze and interpret financial report and/or legal documents. Ability to effectively present information in one-on-one and small group situations, to customers, clients, and other employees in the organization Education and/or Experience AS/AA Degree (2 year) from an accredited university/college OR One to two years of experience in an operations, systems development or security role. Computer Skills MS Office programs Certificates, Licenses, Registrations CompTIAA+, CompTIA Network +, or similar certification, or the willingness and ability to obtain such a certification within 12 months of employment. Other Qualifications (including physical requirements) An aptitude for quickly mastering new IT processes and tools. A passion for developing mature processes and deriving/ displaying meaningful analytics from disparate data. The ability and willingness to make critical decisions in high stress security scenarios where time is of the essence. The ability to cut through complex problems and identify simple, sustainable, and economical solutions to ever evolving security challenges facing the enterprise. Equal Employment Opportunity Information: Simmons First National Corporation and its subsidiaries are committed to a policy of equal employment with respect to a person's race, color, religion, sex, ancestry, sexual orientation, gender identity, national origin, covered veterans, military status, physical or mental disability or any other legally protected classifications.