Senior Security Administrator - Veterans Sourcing Group

Responsible for overseeing and managing the organizations overall security posture, including policies, standards, and procedures. The primary focus is to minimize risk and protect critical information and systems by configuring security controls.

• Work independently and can train others to help fulfill the essential functions of the department that include the following operations:
• Manage all user ids, access permissions, and other security components on all servers and for all applications whether internal or external to the Bank. Where there is an issue, independent judgment, including risk assessment, is required to grant access.
• Provide user support for all network and application security issues.
• Resolve security logs and reports to determine access violations as assigned.
• Determine validity of violations for assigned applications, like 1Link Banking, and bring actionable violations to the attention of a higher-level administrator.
• Exercise discretionary judgment in determining method of satisfying requests for special tasks and assignments as requested.
• Maintain security devices (e.g. RSA) and manage related support issues for Bank customers and internal staff.
• As assigned, train a newer person in a specific task or daily duty of the Security Admin function.
• Leads the SOX testing process for the Security Administration team, producing evidence and handing any requests during the events. This includes working directly with Tech Risk, any consultants that Tech Risk hires to help with SOX testing, and with the Bank's external SOX auditor (Typically PWC).
• Assists in all efforts, along with the CISO, for the department when interacting with the FHFA examiners as they relate to Bank Security Administration.
• Assists in the Security Administration team dealing with internal Audit and Compliance requests producing evidence and sharing of information (standards, policies, business documentation and procedures).
• Assist coordinates upgrades and enhancements to the various departmental technical systems, and implement enhancements to department workflow and processes