Information Security Engineer

As our Information Security Engineer youll help drive Concora Credits Mission to enable customers to Do More with Credit every single day.

The impact youll have at Concora Credit:

Youllwork as part ofan ITInformation Security Teamin an agile environment. Thisindividual contributorposition isa technicalhands-onrole. Yourfocuswill beoninformation security systemsadministrationimplementation supportsystemmonitoring best practice guidanceandsecurityoperationssupport.

We hire people not positions. Thats because at Concora Credit we put people first including our customers partners and Team Members. Concora Credit is guided by a single purpose: to help non-prime customers do more with credit. Today we have helped millions of customers access credit. Our industry leadership resilience and willingness to adapt ensure we can help our partners responsibly say yes to millions more. As a company grounded in entrepreneurship were looking to expand our team and are looking for people who foster innovation strive to make an impact and want to Do More! Were an established company with over 20 years of experience but now were taking things to the next level. Were seeking someone who wants to impact the business and play a pivotal role in leading the charge for change.

As our Information Security Engineer you will:

• Identify new and novel ways to address information security challenges in the Concora Credit environment and develop secure solutions for new and existing systems that align with organizational security standards regulatory requirements and business goals.
• Collaborate on the design implementation and optimization of enterprise security controls across on-prem cloud and hybrid environments.
• Evaluate select and deploy new security technologies; lead Proof of Concepts (POCs) and drive vendor assessments to support strategic security initiatives.
• Collaborate with architecture DevOps and IT operations teams todeploy and operate new solutions andembed security early in the system and application life cycle.
• Establish and maintain security baseline configurations hardening standards and technical policies across endpoints servers networks and cloud services.
• Provide input into enterprise security strategies roadmaps and risk mitigation plans.
• Manage securitysystemprojects ensuring timely delivery technical quality and cross-team alignment.
• Demonstrate and champion the use of automation and scripting capabilities to deploy manage and maintain information security capabilities.
• Maintain awareness and knowledge of contemporarysecurity lawsstandards practices and methods.
• Participateas a member of theConcora CreditIncident Response Team.
• Assist with the collectionofdata and maintenance of systems that support ourongoingcompliance activities.
• Other duties as assigned.

These duties must be performed with or without reasonable accommodation.

We know experience comes in many forms and that many skills are transferable. If your experience is close to what were looking for consider applying. Diversity has made us the entrepreneurial and innovative company that we are today.

Requirements:

• Bachelors degree or equivalent work experience with a minimum of 2 years experience in information security systems engineering or a related role.
• Workingknowledgeofinformation security control technologies including EDR access control cryptography vulnerability managementSIEM/log management IDS/IPS DLPcloud securityand more.
• Workingknowledgeofnetwork protocols desktops laptopsDNSand networking devices - servers routersVPNs proxies firewalls.
• Working knowledge of Azure Entra and Microsoft serverand security products.
• Proven capability to take ownership of delegated initiatives with limited initial direction using sound judgment to clarify scope drive progress and act as a trusted representative of the team.
• Demonstrated ability to translate security and compliance requirements into practical business-aligned solutions that manage risk without unnecessarily impeding operations.
• Strong written and verbal communication and presentation skills including the ability to discuss technical topics with a non-technical audience.

Preferred Qualifications:

• Experience building and supporting information technology systems specifically those used to performinformation security functions or integrations.
• StrongCLI and scriptinglanguage experience (PowerShell strongly preferred)
• Working knowledgeof security frameworks such as NIST ISO/IEC27000 series PCI-DSSFedRamp andCSA.
• Working knowledge of securityarchitecturefor cloud/hybrid systems specifically Azure.
• Excellent conceptualization analytical logical and documentation skills.
• Experience in the financial services or servicing operations sectorsis desirable.

Whats In It For You:

• Medical Dental and Vision insurance for you and your family
• Relax and recharge with Paid Time Off (PTO)
• 6 company-observed paid holidays plus 3 paid floating holidays
• 401k(after 90 days) plus employer match up to 4%
• Pet Insurance for your furry family members
• Wellness perks including onsite fitness equipment at both locations EAP and access to the Headspace App
• We invest in your future through Tuition Reimbursement
• Save on taxes with Flexible Spending Accounts
• Peace of mind with Life and AD&D Insurance
• Protect yourself with company-paid Long-Term Disability and voluntary Short-Term Disability

Concora Credit provides equal employment opportunities to all Team Members and applicants for employment and prohibits discrimination and harassment of any type without regard to race color religion age sex national origin disability status genetics protected veteran status sexual orientation gender identity or expression or any other characteristic protected by federal state or local laws.

Employment-based visa sponsorship is not available for this role.

Concora Credit is an equal opportunity employer (EEO).

Please see the Concora Credit Privacy Policy for more information on how Concora Credit processes your personal information during the recruitment process and if applicable based on your location how you can exercise your privacy rights. If you have questions about this privacy notice or need to contact us in connection with your personal data including any requests to exercise your legal rights referred to at the end of this notice please contact .