Job Title: IAM Information Security Engineer – Chatsworth Onsite Daily
Overview:
- The IAM Information Security Engineer is responsible for designing, implementing, and maintaining security controls that protect the credit union’s systems, infrastructure, and data.
- This role ensures security capabilities are preventive, detective, and responsive, while maintaining compliance with regulatory requirements. The engineer works closely with IT, Infrastructure, Cloud, and Application teams to embed security into daily operations and ensure audit readiness.
- Implements the enterprise Identity and Access Management (IAM) framework, governing how employees, contractors, and temporary staff are granted role-based access to systems and applications.
- Maintains the documentation for certification and accreditation of each information system in accordance with Federal Financial Institutions Examination Council (FFIEC) requirements.
- Assesses the impacts on system modifications and technological advances. Additionally, review systems to identify potential security weaknesses, recommend improvements to amend vulnerabilities, implement changes and document upgrades and familiarization with National Institute of Standards and Technology (NIST).
What You Will Do:
- Security Engineering & Operations: Design, implement, and maintain security controls across network, endpoint, server, cloud, and identity platforms.
- Configure, tune, and support security tools including (but not limited to): Endpoint Detection and Response (EDR/XDR), Network security controls (firewalls, segmentation, IDS/IPS) Identity and Access Management (IAM), MFA, and privileged access controls Vulnerability management and configuration hardening tools.
- Monitor security alerts, investigate suspicious activity, and support incident containment and remediation efforts.
- Vulnerability & Threat Management : Work with IT teams to prioritize remediation based on risk, exposure, and business impact. Track remediation progress and validate corrective actions.
- Incident Response & Resilience team membership: Participate in security incident response activities, including detection, investigation, containment, and recovery, forensic data collection and evidence preservation as required. Provide technical input into risk assessments, vendor reviews, and exception requests.
- Review system designs and architecture for security risks and control gaps.
- Develop and implement IAM framework. Partner with various stakeholders in the credit union to ensure that proposed processes meet regulatory requirements and best practices.
- Help team members to determine security requirements for business processes and technology systems based upon generally accepted risk analysis methods, functional and performance requirements, information security architecture principles, and market-leading solutions.
- Support the team in the creation, tracking, and completion of any compliance findings related to identity and access management.
- Participate in audit related activities as they pertain to IT access for internal and external audits.
- Stays abreast of changes and improvements in systems and technology.
- Assumes responsibility for establishing and maintaining effective communication and coordination with Company personnel and with Management.
- Keeps management informed of area activities and of any significant problems.
- Completes required reports, records, and other documentation.
- Assumes responsibility for ensuring professional business relations exist with vendors and trade professionals.
- Ensures requests, questions and problems are courteously and professionally resolved. Ensures communications are efficient and effective.
- Completes required reports, records, and other documentation.
- Help drive continuous quality and process improvement within InfoSec and IT.
