IT Security & Risk Analyst

Position Summary:

North Salem State Bank is seeking an IT Security & Risk Analyst to lead key components of the Bank's information security and risk management program, with a primary focus on vendor risk management, vulnerability remediation, and control monitoring. This position works closely with IT leadership and external partners (vCISO) to ensure that security controls are not only implemented but also actively tracked, enforced, and improved in alignment with regulatory expectations (FFIEC, NIST) and internal policies. It offers the opportunity to take ownership of key security and risk functions while working alongside experienced IT leadership and external security partners, and provides backup support to the IT helpdesk as needed. North Salem State Bank offers a collaborative, team-focused environment where individuals are empowered to take initiative and make a meaningful impact.

Key Responsibilities:

Own and lead the vendor risk management lifecycle, including due diligence reviews, risk assessments, and ongoing monitoring, in coordination with IT leadership and external partners Own and manage enterprise patching and vulnerability remediation efforts, ensuring compliance across endpoints, servers, and network devices Own and drive remediation of identified security and vendor risks, ensuring timely resolution and escalating as needed Monitor alerts from security tools (EDR, SIEM, firewall, email security, etc.) and triage and escalate suspicious activity Monitor and review security controls, including firewall configurations, rule sets, alerts, and user access across systems and applications Maintain and monitor logs, reports, and evidence for audits and internal reviews Monitor and report on key risk indicators (KRIs) and control effectiveness Assist with incident response, business continuity coordination, and documentation Support vendor risk activities by coordinating with business units and vendors to collect and assess required documentation (SOC reports, financials, BCP/DR, etc.) Support security reviews of new and existing applications or vendors Assist in maintaining alignment with FFIEC, NIST, and internal security frameworks Support audits and regulatory exams by gathering evidence and documentation Support the maintenance of security policies, standards, and procedures Provide backup support for IT Helpdesk operations, including ticket intake, triage, and escalation to appropriate IT staff or vendors Develop and maintain knowledge base documentation for common issues and resolutions Support the IT team during high-volume periods, projects, or staff absences Other duties as assigned

Education & Experience:

Associate's or Bachelor's degree in Information Technology, Computer Science, or related field; or equivalent experience. 2+ years of experience in IT security, risk, systems administration, helpdesk support, or a related IT role Strong customer service and troubleshooting skills. Ability to prioritize tasks and work independently Valid driver's license and willingness to travel to branches as needed (mileage reimbursed). Preferred Skills (Nice to Have): Security +, CISA, CRISC, or SSCP Certifications Familiarity with scripting or automation (PowerShell, etc.) Exposure to Microsoft Intune, Azure Active Directory, or endpoint management platforms Experience in a regulated environment (banking, financial services, healthcare, etc.) preferred Supervisory Responsibility This position does not supervise others. Work Environment & Physical Demands Professional office environment using standard equipment; regular, timely attendance during assigned hours; ability to sit/stand for extended periods. Position Type / Expected Hours of Work The standard work hours for this role are Monday-Friday, 8:00 a.m.-5:00 p.m., and some half-day Saturdays. However, there is flexibility for release windows and after-hours support during planned changes. Travel Primarily Avon, IN; occasional travel to other bank locations and/or vendor meetings. Additional Eligibility & Other Duties Employment contingent on background and credit checks. Duties, responsibilities, and activities may change at any time with or without notice. NSSB is an Equal Opportunity Employer.

Pay:

$50,000.00 - $90,000.00 per year

Benefits:

401(k) 401(k) matching Dental insurance Health insurance Health savings account Life insurance Paid time off Parental leave Retirement plan Vision insurance

Work Location:

In person