Job Description

<div class="ms-FocusZone ui-chat__message gn go gp ap gq gr gs gt gu gv gw gx gy gz ha hb hc hd he hf hg hh hi hj hk hl hm hn ho hp hq hr hs ht hu hv hw hx hy hz ia ib ic id ie if ig ih ii ij ik il im in io ip iq ir is it iu iv iw ix iy iz ja jb jc jd je jf jg jh ji jj jk jl jm jn jo jp jq ct jr js jt ju jv jw jx jy jz ka kb kc kd ke fh kf kg kh ki kj kk kl km kn ko kp kq kr ks kt ku kv kw kx ky kz la lb lc ld ui-animation gk gl gm" tabindex="0" role="group" data-is-focusable="true" aria-labelledby="author-1666375139949 importance-1666375139949 badge-1666375139949 read-status-icon-1666375139949 content-1666375139949 attachments-1666375139949 timestamp-1666375139949 edited-1666375139949" data-last-visible="true" data-mid="1666375139949" data-tid="chat-pane-message" data-tabster="{"observed":{"names":["message-pane"]},"uncontrolled":{}}" data-focuszone-id="FocusZone865">


<div id="content-1666375139949" class="ui-box b lq lr ls lt lu lv lt lw lx ly lz ma mb mc md me mf mg mh mi mj mk ml mm mn mo mp mq mr ms mt mu mv mw mx my mz na nb nc nd ne nf ng nh ni nj nk nl nm nn no np nq nr ns nt nu nv nw nx ny nz oa ob oc od oe of og oh oi oj ok ol om on oo op oq or os ot ou ov ow ox oy oz pa pb pc pd pe pf pg ph pi pj pk pl pm pn po pp pq pr ps pt pu pv pw px py pz qa qb qc qd qe qf qg qh qi qj qk ql qm qn qo qp qq qr qs qt qu qv qw qx qy qz ra rb rc rd re rf rg rh ri rj rk rl rm rn ro rp rq rr rs rt ru rv rw rx ry rz sa sb sc sd se sf sg sh si sj sk sl sm sn so sp sq sr ss st su sv sw sx sy sz ta tb tc td te tf tg th ti tj tk tl tm tn to tp tq tr ts tt tu tv tw tx ty tz ua ub uc ud ue uf ug uh ui uj uk ul um un uo up uq ur us ut uu uv uw ux uy uz va vb vc vd ve vf vg vh vi vj vk vl vm vn vo vp vq vr vs vt vu vv vw vx vy vz wa wb wc wd we wf wg wh wi wj wk wl wm wn wo wp wq wr ws wt wu wv ww wx wy wz xa xb xc xd xe xf xg xh xi xj xk xl xm xn xo xp xq xr xs xt xu xv xw xx xy xz ya yb yc yd ye yf yg yh yi yj yk yl ym yn yo yp yq yr ys yt yu yv yw yx yy yz za zb zc zd ze zf zg zh zi zj zk zl zm zn zo zp zq zr zs zt zu zv zw zx zy zz aba abb abc abd abe abf abg abh abi abj abk abl abm abn abo abp abq abr abs abt abu abv abw abx aby abz aca acb acc acd ace acf acg ach aci acj ack acl acm acn aco acp acq acr acs act acu acv acw acx acy acz aea aeb aec aed aee aef aeg aeh aei aej aek ael ui-chat__message__content" dir="auto" aria-label="Implements, administers, and/or monitors bank security systems and solutions that encompass perimeter defense, security operations, identity and access management, and incident response. Systems and processes may include, but are not limited to: Firewalls, intrusion detection/prevention systems, content filtering, data loss prevention, vulnerability management, endpoint protection, network access control, security information and event management, identity governance and administration, single sign on, public key infrastructure, privileged account management, security monitoring, data analysis, alert tuning, and incident triage. Day to day tasks entail supporting, maintaining and enhancing technical controls to prevent, detect, or respond to cybersecurity threats; comply with regulatory standards; or align to industry best practice. ESSENTIAL DUTIES AND RESPONSIBILITIES Experience with managing Zscaler Web Proxy or other platforms.  Administer one or more core network security controls across on-prem and cloud environments to include:  Web Proxy, Content Filtering, Mail Security, Data Loss Prevention, Denial of Service Protection, Advanced Malware Prevention, Cloud Access Security Broker or Web Application Filtering, Firewalls, Intrusion Detection/Prevention, Partner and Client VPNs. Identify security gaps and control deficiencies as well as determine steps to mitigate findings. Requires continuous self-reflection and learning of soft/technical skills to accommodate constantly changing e-business and cybersecurity landscape. Analyze security alerts and perform investigations, evidence collection, and analysis. Prepare technical and executive security reports and metrics. Coordinate across functional teams to troubleshoot and resolve service disruptions; requires participation in after-hours on-call rotation and after-hours ad-hoc incident resolution. Demonstrates compliance with all bank regulations for assigned job function and applies to designated job responsibilities -- knowledge may be gained through coursework and on-the-job training. Keeps up to date on regulation changes. Follows all Bank policies and procedures, compliance regulations, and completes all required annual or job-specific training. Maintain a working knowledge of Bank's written policies and procedures regarding Bank Secrecy Act, Regulation CC, Regulation E, Bank Security and other regulations as applicable to this job description. May be asked to coach, mentor, or train others and teach coursework as subject matter expert. Actively learns, demonstrates, and fosters the Umpqua corporate culture in all actions and words. Takes personal initiative and is a positive example for others to emulate. Embraces our vision to become "The World's Greatest Bank." May perform other duties as assigned. SUPERVISORY RESPONSIBILITIES   none REQUIRED KNOWLEDGE, SKILLS AND ABILITIES High school diploma/GED required. Certifications preferred:  ZCCA-IA, AZ- 9 00,   AZ-500,   Security+, GSEC, CCNA,   CCNP,   PCNSE, CISSP Advanced experience in Client and Server architecture to include Operating Systems, security applications, Active Directory, and network architecture in physical, virtual, and cloud infrastructure. Knowledge of defense in depth, security best practice, security controls, networking concepts, emerging technologies, attack methods, and mitigation techniques. Associate, vocational or technical degree in information security preferred. Prefer 5-8 years of information technology. Requires 1-3 years of information/cyber security experience. Knowledge of internal audit concepts and regulatory requirements (e.g. SOX, GLBA, etc.). Ability to prioritize tasks and work though issues and obstacles with minimal guidance and coaching. Ability to work individually and as part of a team. Proficient written/verbal communications skills. PHYSICAL AND ENVIRONMENTAL DEMANDS Office environment -- no specific or unusual physical or environmental demands. Occasional travel. Umpqua Bank is committed to employing a diverse workforce. Qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity, gender expression, protected veteran status, or disability. We maintain a drug-free workplace and may perform pre-employment substance abuse testing.">

Implements, administers, and/or monitors bank security systems and solutions that encompass perimeter defense, security operations, identity and access management, and incident response. Systems and processes may include, but are not limited to: Firewalls, intrusion detection/prevention systems, content filtering, data loss prevention, vulnerability management, endpoint protection, network access control, security information and event management, identity governance and administration, single sign on, public key infrastructure, privileged account management, security monitoring, data analysis, alert tuning, and incident triage. Day to day tasks entail supporting, maintaining and enhancing technical controls to prevent, detect, or respond to cybersecurity threats; comply with regulatory standards; or align to industry best practice.

 

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Experience with managing Zscaler Web Proxy or other platforms. 


• Administer one or more core network security controls across on-prem and cloud environments to include:  Web Proxy, Content Filtering, Mail Security, Data Loss Prevention, Denial of Service Protection, Advanced Malware Prevention, Cloud Access Security Broker or Web Application Filtering, Firewalls, Intrusion Detection/Prevention, Partner and Client VPNs.


• Identify security gaps and control deficiencies as well as determine steps to mitigate findings.


• Requires continuous self-reflection and learning of soft/technical skills to accommodate constantly changing e-business and cybersecurity landscape.


• Analyze security alerts and perform investigations, evidence collection, and analysis.


• Prepare technical and executive security reports and metrics.


• Coordinate across functional teams to troubleshoot and resolve service disruptions; requires participation in after-hours on-call rotation and after-hours ad-hoc incident resolution.


• Demonstrates compliance with all bank regulations for assigned job function and applies to designated job responsibilities -- knowledge may be gained through coursework and on-the-job training. Keeps up to date on regulation changes.


• Follows all Bank policies and procedures, compliance regulations, and completes all required annual or job-specific training.


• Maintain a working knowledge of Bank's written policies and procedures regarding Bank Secrecy Act, Regulation CC, Regulation E, Bank Security and other regulations as applicable to this job description.


• May be asked to coach, mentor, or train others and teach coursework as subject matter expert.


• Actively learns, demonstrates, and fosters the Umpqua corporate culture in all actions and words.


• Takes personal initiative and is a positive example for others to emulate.


• Embraces our vision to become "The World's Greatest Bank."


• May perform other duties as assigned.

 

SUPERVISORY RESPONSIBILITIES none

 

 

REQUIRED KNOWLEDGE, SKILLS AND ABILITIES

 

• High school diploma/GED required.


• Certifications preferred:  ZCCA-IA, AZ-900, AZ-500, Security+, GSEC, CCNA, CCNP, PCNSE, CISSP


• Advanced experience in Client and Server architecture to include Operating Systems, security applications, Active Directory, and network architecture in physical, virtual, and cloud infrastructure.


• Knowledge of defense in depth, security best practice, security controls, networking concepts, emerging technologies, attack methods, and mitigation techniques.


• Associate, vocational or technical degree in information security preferred.


• Prefer 5-8 years of information technology.


• Requires 1-3 years of information/cyber security experience.


• Knowledge of internal audit concepts and regulatory requirements (e.g. SOX, GLBA, etc.).


• Ability to prioritize tasks and work though issues and obstacles with minimal guidance and coaching.


• Ability to work individually and as part of a team.


• Proficient written/verbal communications skills.

PHYSICAL AND ENVIRONMENTAL DEMANDS

• Office environment -- no specific or unusual physical or environmental demands.


• Occasional travel.

 

Umpqua Bank is committed to employing a diverse workforce. Qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity, gender expression, protected veteran status, or disability. We maintain a drug-free workplace and may perform pre-employment substance abuse testing.