Security Analyst

• Coordinate transitions to new vendors, new business or technical processes, new technology, or significant changes to current technology
• Implement changes affecting business or technical processes with moderate to high stakeholder impact and complexity or deadline challenges
• Analyze business or technical processes with moderate to high stakeholder impact
• Conduct research, generate comparisons, draw conclusions, make recommendations, and validate solutions for transitional changes
• Detect and prevent organizational threats through security audits and risk analysis
• Ensure actions align with enterprise strategies
• Communicate with customers, team members, and stakeholders to ensure successful outcomes
• Conduct investigations with internal and external entities
• Use technical guidance from leaders and higher-level peers to address complex problems and projects
• Administer daily operations and implementation of security, emergency communication, and fire/life safety systems
• Develop and maintain knowledge of ERIE's technical security systems, procedures, and practices
• Assist senior staff with security initiatives and implementation resolutions
• Assist with developing training programs and applications for security and fire/life safety systems at Home Office and field office locations

• Provide critical support for the Information Security team’s operational, compliance, and audit functions
• Support large Information Security projects
• Develop cybersecurity security-awareness and phishing-training materials
• Support employees with spam and phishing email issues
• Assist with setup, monitoring, and maintenance of internal security platforms
• Support system and application security company-wide against current and emerging threat actors and threat vectors
• Monitor device, application, and employee adherence to policies and procedures
• Update and maintain the Bank’s disaster recovery plans
• Plan, conduct, and document disaster recovery tests
• Support and monitor email spam and phishing management tools
• Support incident response management tools
• Support internal and external information security and information technology audits and examinations
• Perform second-line review of required reporting
• Assist with responses to audit documentation requests
• Travel occasionally to market areas and attend offsite seminars or training sessions
• Pursue ongoing information security certifications, conferences, and training to enhance the Bank’s security posture

Information Security Analyst

• Perform incident response for cybersecurity and data loss incidents
• Provide oversight of Information Security Program controls by enforcing data confidentiality, integrity, and availability
• Maintain systems that protect data from unauthorized access
• Identify, report, and resolve security violations
• Develop and enforce policy in accordance with FFIEC regulations
• Assist the VP-Security Operations/Intelligence Manager with a comprehensive security coverage program for the Bank
• Develop and implement policies, procedures, and best practices protecting information assets from unauthorized disclosure and alteration
• Identify and assess external and internal risks through technology risk assessments
• Facilitate and support Internal Audit requests, including review, remediation, and responses to audit findings
• Facilitate OCC requests during IT examinations
• Identify opportunities to improve information availability and security through process improvement and information technology
• Administer, maintain, and report on the enterprise phishing and cybersecurity awareness training platform
• Assess and enforce technology compliance policies for enterprise systems
• Investigate incidents involving data loss or data exposure
• Perform access control reviews of information and information systems
• Perform other duties as assigned by management

Data Security Analyst

• Perform incident response for cybersecurity and data loss incidents
• Provide oversight of Information Security Program controls by enforcing data confidentiality, integrity, and availability
• Maintain systems that protect data from unauthorized access
• Identify, report, and resolve security violations
• Develop and enforce policy in accordance with FFIEC regulations
• Assist the VP-Security Operations/Intelligence Manager with a comprehensive security coverage program
• Develop and implement policies, procedures, and best practices protecting information assets
• Identify and assess external and internal risks through technology risk assessments
• Facilitate and support Internal Audit requests, including review, remediation, and responses to audit findings
• Facilitate OCC requests during IT examinations
• Identify opportunities to improve information availability and security through process improvement and information technology
• Administer, maintain, and report on the enterprise phishing and cybersecurity awareness training platform
• Assess and enforce technology compliance policies for enterprise systems
• Investigate incidents involving data loss or data exposure
• Perform access control reviews of information and information systems
• Perform other duties as assigned by management

• Provide enterprise security solutions addressing business, regulatory, and legal requirements
• Assure the confidentiality, integrity, and availability of information assets
• Execute and process mainframe security and access management requests
• Manage privileged, service, shared, emergency, and non-person user accounts
• Create, update, and maintain supporting and procedural documentation
• Support Identity and Access Management activities
• Complete implementation tasks for systems and network security technologies
• Execute testing plans
• Coordinate and prepare data security event and incident reporting
• Provide system and network architecture support
• Provide technical support to business and technology associates
• Resolve complex issues
• Perform system and network upgrade tasks
• Design and analyze vendor services and information security requirements
• Maintain relationships with key vendors
• Complete lights-on initiatives for equipment consolidation and business relocations
• Perform complex configuration changes
• Perform capacity analysis and recommend and implement capacity increases
• Respond to Level 3 and 4 change and problem requests
• Lead Level 1 and 2 incident recoveries and root cause analysis

Security Analyst III – Identity and Access Management

• Partner with engineering teams across the design, implementation, and operational lifecycle to ensure secure, scalable, resilient, and compliant infrastructure
• Translate security frameworks, regulatory requirements, and security policies into technical guidance
• Advise on secure architecture, operating system hardening, identity management, cloud security, network security, encryption, certificate management, and infrastructure best practices
• Collaborate with GRC and Information Security teams on compliance objectives, findings, audits, and risk priorities
• Guide vulnerability remediation, prioritize findings, evaluate operational impacts, and validate remediation
• Develop secure configuration standards using DISA STIGs, vendor guidance, and organizational baselines
• Assist with compliant configurations across Windows, Linux, virtualization, cloud, identity, storage, and enterprise infrastructure
• Analyze vulnerability, compliance, operational, and infrastructure data to identify trends and organizational risk
• Develop executive dashboards, metrics, and reporting on security health, remediation, compliance, risk, and maturity
• Prioritize security initiatives with engineering leadership
• Automate security validation, compliance reporting, configuration management, vulnerability remediation, and infrastructure governance
• Evaluate emerging technologies, controls, and infrastructure practices
• Promote Security by Design across infrastructure planning, engineering standards, operations, and roadmaps
• Provide technical leadership for cloud migrations, platform upgrades, operating system lifecycle management, and enterprise transformations
• Participate in security architecture reviews, infrastructure design discussions, change management, and technical governance boards
• Develop technical documentation, security standards, implementation guides, playbooks, and procedures
• Advise engineers on secure engineering principles and infrastructure security techniques
• Evaluate infrastructure security posture and recommend improvements
• Advocate Zero Trust, Infrastructure as Code, Policy as Code, Continuous Compliance, and Secure Configuration Management
• Champion automation-first security practices

Senior Security Analyst

• Advise Infrastructure Engineering on secure infrastructure service design, implementation, and continuous improvement
• Partner with Cloud Engineering, Platform Engineering, SRE, and Systems Engineering teams
• Translate security frameworks, regulations, and policies into actionable technical guidance
• Provide expertise on secure architecture, OS hardening, identity management, cloud security, network security, encryption, certificate management, and infrastructure best practices
• Collaborate with GRC and Information Security teams on compliance objectives, findings, audits, and risk priorities
• Guide vulnerability remediation, prioritize findings, evaluate operational impacts, and validate remediation
• Develop secure configuration standards using DISA STIGs, vendor guidance, and organizational baselines
• Support compliant configurations across Windows, Linux, virtualization, cloud, identity, storage, and enterprise infrastructure
• Analyze vulnerability, compliance, operational, and infrastructure data to identify trends and organizational risk
• Develop executive dashboards, metrics, and reports on security health, remediation, compliance, risk, and maturity
• Prioritize security initiatives with engineering leadership
• Automate security validation, compliance reporting, configuration management, vulnerability remediation, and governance
• Evaluate emerging technologies, controls, and infrastructure practices
• Promote Security by Design across infrastructure planning and engineering
• Provide technical leadership for cloud migrations, platform upgrades, OS lifecycle management, and technology transformations
• Participate in architecture reviews, design discussions, change management, and technical governance boards
• Develop technical documentation, security standards, implementation guides, playbooks, and procedures
• Advise engineers on secure engineering principles and infrastructure security techniques
• Recommend long-term infrastructure security improvements
• Advocate Zero Trust, Infrastructure as Code, Policy as Code, Continuous Compliance, and Secure Configuration Management
• Champion automation-first security practices

• Advise Infrastructure Engineering on secure infrastructure service design, implementation, and continuous improvement
• Partner with Cloud Engineering, Platform Engineering, SRE, and Systems Engineering teams
• Translate security frameworks, regulatory requirements, and policies into technical guidance
• Provide expertise on secure architecture, operating system hardening, identity management, cloud security, network security, encryption, certificate management, and infrastructure best practices
• Collaborate with GRC and Information Security teams on compliance objectives, security findings, audits, and risk priorities
• Guide vulnerability remediation, prioritize findings, evaluate operational impacts, and validate remediation
• Develop secure configuration standards using DISA STIGs, vendor guidance, and organizational baselines
• Support compliant configurations across Windows, Linux, virtualization, cloud, identity, storage, and enterprise infrastructure
• Analyze vulnerability, compliance, operational, and infrastructure data to identify trends and organizational risk
• Develop executive dashboards, metrics, and reports on security health, remediation, compliance, risk, and maturity
• Prioritize security initiatives with engineering leadership
• Automate security validation, compliance reporting, configuration management, vulnerability remediation, and infrastructure governance
• Evaluate emerging technologies, security controls, and infrastructure practices
• Promote Security by Design across infrastructure planning and engineering
• Provide technical leadership during cloud migrations, platform upgrades, operating system lifecycle management, and technology transformations
• Participate in architecture reviews, infrastructure design discussions, change management, and technical governance boards
• Create security standards, implementation guides, playbooks, and operational procedures
• Advise engineers on secure engineering principles and infrastructure security techniques
• Advocate Zero Trust, Infrastructure as Code, Policy as Code, Continuous Compliance, and Secure Configuration Management
• Champion automation-first security practices