State of Washington Information Security Financial Examiner

Job Description:

Some of What You Will Do:

• Perform in-depth technology risk analysis at Washington State Credit Unions, which includes off-site computer analysis, evaluation of technical controls, audit practices, customer information security and cyber security programs, vendor acquisition and oversight, business continuity management and payment systems through the use of computer technology, for credit unions ranging in size from $18 million to Billions in assets.

• Evaluate credit union information technology, security and cyber security risk management policies, practices, and procedures.  Make recommendations for enhancements when appropriate.
• Interpret and determine compliance with applicable state and federal laws, rules and regulations.
• Identify current and emerging IT risks within the credit union/banking industry and address them consistently at Washington-chartered credit unions.

• Evaluate, develop and enhance the division’s IS&T examination program in relation to emerging risks and trends.

• May serve as an Information Technology (IT) EIC (Examiner in Charge) by managing all phases of IT field examinations; plan the scope of examinations, coordinate activities of assigned examiners, facilitate meetings with Credit Union Executive Management and volunteer Board of Directors, as well as work jointly with the National Credit Union Administration, our federal counterpart.
• Review and assess internal routines and controls related to electronic banking, ACH (automated clearing house) wire transfers, third-party payment processors, remote merchant deposit capture and other emerging technologies.
• Prepare and organize detailed work papers to support examination findings as conveyed to management.

 

Qualifications

 

Required Qualifications and Skills:
An associate’s degree that focuses specifically on information security, cyber security finance, business administration, economics or a related field of study.

OR

Equivalent work/educational experience in the regulation, examination or audit, and/or analysis of information security/technology and cybersecurity may also be considered in meeting the required education.   Experience includes conducting information technology/ information security/cybersecurity examinations/reviews; serving as an auditor on technology audits of security controls or policies; or administering information security/cyber security programs or other key data center functions.  Further, experience working in network support, system operations, or information security/cybersecurity may also be considered.

Desired Qualifications and Skills:
A bachelor’s degree in information systems, information security, cyber security, or a related field of study.

Current or recent regulatory experience and/or experience working for a regulated entity in information security or information systems review/audit.

The most successful Financial Examiner Information Security Specialist candidates should possess the following skills and abilities:

• An individual possessing some or all of the following certifications would be desired but not required:  Certified Information Systems Auditor (CISA), Certified Information Systems, Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Manager (CISM) or other equivalent designation.
• Recent regulatory or IT auditing experience.
• Credit Union or other financial institution experience, especially in IT or information security.
• Hands-on experience working with cybersecurity risk management frameworks (e.g., NIST CSF, CIS Critical Security Controls).

• Experience with information security governance and policy reviews. Strong leadership qualities, work ethic and professional behavior.

• Excellent interpersonal skills to include the ability to work closely with peers, division management, financial institution representatives, and federal examiners.
• Excellent verbal and written communication skills.
• Advanced level computer skills to include proficiency in Microsoft Office Products.

Financial Examiners should be able to work in a close team environment, and work in potentially difficult situations with customers/clients in a fast-paced environment with multiple deadlines and interruptions.

Duty Station and Travel Requirements:
A significant amount of an examiner’s time is spent in the field (approximately 30%) or remotely conducting examinations at various financial institutions throughout the state. This position requires some overnight travel. During your first year, you will attend a week of training in Washington, D.C.. When not in the field conducting examinations, work assignments will be completed at your home residence – which will be your official duty station. Occasional travel to DFI Headquarters in Tumwater for training and/or meetings is required. Applicants residing in Thurston, Pierce, Spokane, Mason, Lewis, or King County are preferred. Candidates from other counties will be considered.

Typical Work Schedule:
The work schedule for this position is Monday – Thursday 7:30 am – 5:30 pm with alternating Fridays off. On the working Friday, work hours will be 7:30 am – 4:00 pm. Examiners will have an hour for lunch each day, except for on the working Friday when lunch is half an hour