IT Infrastructure & Security Analyst

Why You'll Love Working at Quorum At Quorum Federal Credit Union, we are a cutting-edge credit union that operates as a technology company, delivering innovative financial solutions to our members. As a remote organization, we thrive on collaboration and recognize outstanding performance. We are the ideal workplace for self-motivated individuals who are committed to organizational success and eager to join a dynamic team of professionals. We stand out as a best-in-class employer, offering a unique and supportive work environment that fosters personal and professional growth. Our culture is built on valuing teamwork, recognizing achievements, and providing the tools and resources needed to excel. If you are looking for a place where you can make a meaningful impact, enjoy a flexible and fulfilling work experience, and be part of a forward-thinking team, Quorum Federal Credit Union is the perfect fit for you. How You'll Make an Impact The IT Infrastructure & Security Analyst is a member of the Information Technology team and is responsible to support and maintain the organization's IT infrastructure environment, ensuring the reliability, performance and security of systems and networks. The position will hold a hybrid role, providing technical support for our IT Infrastructure alongside our Managed Service Provider (MSP) while also owning several key Information Security activities. The IT Infrastructure & Security Analyst works closely with both internal teams and the MSP to ensure that servers, network devices, endpoints and related infrastructure and software effectively support Quorum's business needs. The IT Infrastructure & Security Analyst operates independently, managing and/or supporting projects and deliverables across infrastructure, Azure Cloud and M365 platforms and tools. In addition, the IT Infrastructure & Security Analyst provides first line end-user client services support (help desk) as needed. Responsibilities include monitoring outsourced security services, producing reports on the organization's security posture (including patching status and vulnerability scans), and reviewing threat intelligence. The role is also responsible for developing and delivering regular security education and awareness content, including bimonthly Information Security communications published in Microsoft Teams and SharePoint What You'll Be Doing Key Responsibilities

• Systems Infrastructure and Admin In conjunction with the MSP, supports the

End User Computing Environment:

M365 Applications and Services including Exchange Online, Teams and SharePoint. Hybrid AD / Entra IdP (including SSO and Conditional Access Policies). Intune Endpoint Management (including hardware and software deployment, policy deployment and MDM). VDI

• Citrix Cloud, Microsoft AVD.

In conjunction with MSP, supports

Azure Hosting Environment:

Azure Compute / Virtual Machines. Azure and General Networking (Routing, DNS, DHCP). Provides helpdesk and desktop client support to all staff, including remote users: Triage, respond to and manage tickets in Quorum's Service Desk system. Respond to general hardware and software incidents and requests. Acts as a technical liaison with key external vendors and the MSP. Opens and tracks incidents and requests for services managed by the MSP. Regularly reviews tickets that come into the MSP for handling issues or escalation. Partners with internal team members on various project activities in support of IT goals and objectives as well as functions as a project lead on small IT initiatives, when applicable. Contributes subject matter expertise in assigned areas, executes assigned deliverables. Key Responsibilities

• Information Security Provides first-line Incident Response to alerts generated by our MSP SOC or related system (Business Risk / Dark Web).

Performs vendor due diligence (i.e. information security risk assessments) and SOC audit reviews. Responsible for a variety or Information Security related "Business as Usual"

Activities:

Patch Management

• Review Reports, Identify Issues & Trends. Vulnerability Management
• Review Reports, Identify Remediation Actions. DLP
• Review Reports, Identify Possible Incidents. Endpoint Agent True-Up (Recon endpoint security and management agents to host inventory). Quarantined "High Confidence Phish" Email
• Review and Release.

Suspected / Reported

Phishing email & campaigns

• Review, Assess and Respond. Threat Intel
• Monitors and analyzes threat intelligence sources and provide reports to IT management.

Software Inventory Review (EoL / PuP).

Website / Email

Whitelist Requests (Advise on Approval).

Information Technology Policies:

Create, review and maintain assigned information security policies, procedures and controls to align with Cyber Security best practices. Runs the organizations

Information Security Training and Awareness Programs:

InfoSec Educational Posting

• Security education and awareness training for Employees and IT administrators (bi-monthly) Phishing Program (Select campaigns, compile results and perform training).

Other Responsibilities Promotes and maintain a positive work atmosphere by behaving and communicating in a manner consistent with professional standards. Stays abreast of technology and credit union industry standards and developments as well as proactively seeks opportunities to apply new developments within the organization to add value. Ensure adherence to company policies and procedures and Banking/Credit Union regulations. Perform additional duties as required. What You Bring to the Team Bachelor's degree in computer science, information technology or other related degree is strongly preferred; however, a combination of education and related work experience may be considered. Five plus years of technology infrastructure related experience administering and maintaining IT infrastructure and systems. Two plus years of demonstrated experience supporting a Microsoft Azure and M365 based user environment including: Microsoft M365 Exchange Online Email (in a hybrid on-prem / Cloud environment) Microsoft Intune Mobile Device Management for iOS and Android Microsoft Intune AutoPilot and Endpoint Manager Microsoft Teams support and administration Microsoft SharePoint support and administration Microsoft OneDrive support and administration Microsoft Entra ID (Azure AD) IdP including hybrid Active Directory Sync, SSO and SAML Microsoft MFA and Conditional Access Policies Microsoft Office M365 Microsoft Azure compute, storage, networking and security technologies Microsoft AVD VDI (Citrix Cloud and XenDesktop experience a plus) Fundamental understanding of Information Security and Cyber Security concepts Familiarity with common concepts and frameworks, e.g.

SOC2, ISO

27001/27002, CIS18 and NIST Experience with SIEM investigations and KQL a plus Experience supporting virtualized environments, particularly Virtual Desktop Infrastructure and Cloud hosted environments. Previous experience with the following is a plus: Cloud PaaS and SaaS technologies (e.g. Azure Files and Managed SQL). Cloud-based VOIP solution. Fundamental understanding of network protocols including but not limited to TCP/IP, DNS, DHCP, SIP, BGP and SDWan. Demonstrated experience managing and implementing Infrastructure projects. Must have familiarity with PC hardware and software. Excellent problem-solving, organizational, analytical, verbal and written communication skills. Excellent multi-tasking and time management skills. Results driven, service oriented, self-motivated and able to work independently. Trustworthy with the ability to maintain the highest level of integrity and trust. Previous experience with financial services, banking or credit union institutions is a plus. Tools & Work Environment Stable internet connection with speeds high enough for video conferencing and screen sharing Smartphone with current iOS/Android OS Prolonged periods sitting at a workstation and working on a computer Ability to communicate with coworkers and customers via email, chat, teleconference, and/or phone Where You Can Work Candidates must reside within the United States. We are not able to consider applicants who reside in Montana, Nebraska, Rhode Island, or Puerto Rico. Quorum's opportunities are based in the U.S., and U.S. work authorization is required. We are not able to provide current or future sponsorship. Compensation & Rewards Compensation for this role is $113,000

• $123,000 per yea r with the potential for discretionary incentive compensation based on both company and individual performance. Benefits That Support You Excellent health insurance packages with a Health Reimbursement Account option Life, AD&D, Short-Term Disability and Travel Insurance 401k plan with company match dollar for dollar up to 6 percent
• Generous time-off policy with paid time off (PTO), volunteer time off (VTO), birthday PTO, and company-observed holidays Monthly stipend for wellness activities and mental health
• Tuition reimbursement Pet Benefits, including insurance, discounts, "pawternity" PTO day, and more Bonus/commission plan for qualifying roles Employee perks (including mortgage discounts!) PTO purchase and sell-back programs Rewards and peer recognition programs Trust-based, out-come oriented remote work environment for most roles
• After 6 months of service Important Compliance Information Quorum is an Equal Employment Opportunity employer.

Qualified applicants will be considered for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, marital status, protected veteran status, or disability status. Quorum will make reasonable accommodations in compliance with the Americans with Disabilities Act of 1990. Reasonable accommodations are available upon request for applicants and/or employees with qualifying disabilities throughout the application and employment process. Qualified Applicants with arrest or conviction records will be considered for employment in accordance with all applicable federal, state, city and local laws, rules, and regulations. This job description in no way states or implies that these are the only duties to be performed by the employee(s) incumbent in this position. Employee(s) will be required to follow any other job-related instructions and to perform any other job-related duties requested by any person authorized to give instructions or assignments. The company reserves the sole right and discretion to make changes to this job description. Each employee is required to uphold the Credit Union's compliance with all policies, procedures, and required regulations including the Bank Secrecy Act and our Anti-Money Laundering policy. This document does not create an employment contract, implied or otherwise, other than an "at-will" relationship.