Position Goals:
Assist in the monitoring and review of Security controls to detect Cybersecurity threats. Provide risk analysis of business applications and IT infrastructure with consulting to improve security functionality. Design, develop and maintain security metrics for the organization. Participate as a member of the Incident Response Team (IRT)

Direct Management Received:
Director, Cybersecurity

Direct Management Exercised:
None

Essential Duties and Responsibilities:
1. Provide analysis of security events and investigate Cybersecurity threats to the environment.
2. Identify and communicate threat intelligence to appropriate stakeholders.
3. Create and maintain key Cybersecurity metrics.
4. Participate as a member on the Incident Response Team (IRT); including forensic evidence gathering and analysis.
5. Perform reviews of business application and infrastructure systems and projects to identify Cybersecurity risk.
6. Acts as a technical and process SME for Cybersecurity operations. Including attestations, checks and functions.
7. Participate in preparing for Information Security IT audits and exams.
8. Assist with Cybersecurity reviews of application and infrastructure systems.
9. Review and consult with IT on various technologies including network security, logs, routers, switches, hubs, corporate applications and general Cybersecurity related resources.
10. Implement, maintain, and monitor network and security and performance.
11. Perform periodic attestation, control, and performance procedures as deemed necessary.
12. Participation in Cybersecurity Operations on-call program.

Knowledge, Skills and Abilities:
In addition to the list below, it is understood that all positions with the company require individuals who possess a pleasant and friendly attitude, project sensitivity towards customers and fellow employees, and maintain a neat and clean professional appearance. Core competencies have been identified as relevant to every position within the company and include: Ethics and Integrity, Listening, Business Acumen, Customer Focus, Approachable and Savvy, Action Oriented, Managing Time & Priorities, Work/Life Balance, Composure & Patience, Drive for Results, Self Development & Knowledge, Dealing with Change, Decision Quality, and Informing.

• A thorough understanding of key networking protocols and computer operating Systems.
• Ability to provide analysis of IDS, server, firewall logs and other security controls.
• Ability to analyze business applications to determine and communicate risk to stakeholders in an understandable way in a consultative manner.
• Experience with the creation and maintaining of Cybersecurity related metrics.
• Knowledge and understanding of incident response and computer forensics

Competencies
Communication
(Verbal Communication and Written Communication)

• Listens, shows interest
• Demonstrates appropriate non-verbal skills and clarifies with questions and paraphrases
• Informs, encourages the exchange, access and sharing of information
• Modifies communication style appropriately
• Is able to write clearly and succinctly to get messages across to the intended receiver for the desired effect

Decision Quality

• Makes good decisions using analysis, experience and judgment
• Most solutions are accurate when judged over time
• Sought out by others at First Merchants for advice and solutions

Managing Time & Priorities

• Uses his/her time effectively and efficiently
• Focuses efforts on important priorities
• Accomplishes more tasks and assignments in less time
• Can attend to several priorities at a time
• Eliminates roadblocks and stays focused
• Plans daily tasks so important work is accomplished
• Uses workplace tools, technology or personal methods to keep track of priorities and assignments
• Prioritizes and works on multiple tasks effectively while maintaining high quality work results

Working Relationships
(Boss Relationships and Peer Relationships)

• Works well in cooperation with others for the benefit of the company
• Receives and carries out instruction in a positive manner
• Responds well to constructive critique from manager and peers
• Remains open to learning and coaching
• Viewed as a team player by being cooperative and collaborative

Functional/Technical Skills

• Understands processes and procedures necessary to successfully perform tasks
• Possesses the technical and computer skills required in the position
• Demonstrates the ability to learn rapidly and adapt quickly to new processes and technology

Position Requirements:
Education – High School Degree or GED equivalent.
Experience – Over three (3) years of experience in information security or related field experience.

Preferred Requirements:
Associates Degree or higher in a technical field
Certifications in Security

• SANS
• EC Counsel
• Security A+
• CISSP
• CISM
• CISA