Secure Configuration Analyst II

The Secure Configuration Analyst II position is an individual contributor role on the Enterprise Security Architecture team, responsible for supporting the execution and governance of the Bank's Secure Configuration Management. The Analyst will focus on baseline deployment, recertification activities, deviation and exception management, and coordination with technology teams to ensure secure configuration standards are implemented consistently and remain defensible over time.

The ideal candidate possesses a strong foundation in core security principles, including secure configuration, risk management, and control governance. In addition, the candidate will be detail-oriented, process-driven, and comfortable working within defined governance models to ensure consistency and defensibility.

This is a remote role that may be hired in several markets across the United States.

**Remote with ability to travel to Raleigh, North Carolina, Phoenix, Arizona or Morristown, New Jersey, on an as needed basis.

• Support the deployment, maintenance, and lifecycle management of secure configuration baselines across enterprise platforms.

• Track baseline ownership, approvals, and recertification timelines to maintain program completeness and consistency. Coordinate and execute periodic baseline updates and recertifications.

• Drive remediation of configuration drift through the development of consumer-appropriate reporting, dashboards and analytics. Coordinate - through provision of subject-matter expertise and high-level project management - the remediation of drift across the environment.

• Support the secure configuration exception process, including intake, tracking, documentation, and follow-up.

• Act as a consultative point of contact for technology teams regarding secure configuration requirements, baseline expectations, and exception processes.

• Provide light project management support for secure configuration initiatives, including tracking tasks, dependencies, and milestones.

• Bachelors Degree and 4 years of experience in Cyber Security or Technology OR High School Diploma or GED and 8 years of experience in Cyber Security or Technology.

• Experience supporting security, IT risk, compliance, or configuration management programs.

• Experience coordinating work across multiple technical teams and stakeholders.

• Strong organizational skills with the ability to track work, manage dependencies, and follow through.

• Exposure to exception, deviation, or risk acceptance processes.

• Strong written and verbal communication skills

Preferred:

• Experience working in the banking or financial industry.

• Familiarity with secure configuration baselines and/or industry standards such as CIS benchmarks.

• Experience acting in a consultative support role with technology teams.

• Knowledge of issue tracking and reporting tools like Jira or Confluence.

• Interest or exposure to security architecture or governance functions.

The base pay for this position is generally between $97,000 and $149,000. Actual starting base pay will be determined based on skills, experience, location, and other non-discriminatory factors permitted by law. For some roles, total compensation may also include variable incentives, bonuses, benefits, and/or other awards as outlined in the offer of employment.

This job posting is expected to remain active for 45 days from the initial posting date listed above. If it is necessary to extend this deadline, the posting will remain active as appropriate. Job postings may come down early due to business need or a high volume of applicants

Benefits are an integral part of total rewards and First Citizens Bank is committed to providing a competitive, thoughtfully designed and quality benefits program to meet the needs of our associates. More information can be found at https://jobs.firstcitizens.com/benefits.