Information Security Risk Analyst

As a Sr. Information Security Risk Analyst, you will play a key role in supporting the organization’s Information Security Program and its ability to address rapidly changing security threats, technologies, and evolving business needs. This position works closely with enterprise technology and information security teams, as well as business units across the organization, to promote and ensure strong data protection initiatives. Your core responsibilities will include:

• Collaborating across diverse teams and business units to drive key security initiatives forward.
• Enabling the business and stakeholders to make informed, risk-aware decisions by advising on information security risks and proposing feasible and acceptable risk treatment options.
• Supporting the collection and analysis of security performance indicators, metrics, and other evidence as part of information security program efforts, and communicating actionable recommendations to leadership.
• Contributing to the organization’s PCI-DSS compliance and assessment activities while supporting internal technology and business teams throughout the organization.
• Maintaining up-to-date knowledge of information security best practices, evolving threats, technology regulations, and industry trends, and applying this expertise to daily operations and decision-making.
• Assisting in responses to internal and external audits, including third-party security assessments where appropriate.
• Managing multiple, simultaneous workstreams for different stakeholders, communicating issues, risks, and statuses with clarity and timeliness.
• Ensuring practical application and understanding of information security policies and standards across business and technology teams.

Do you have experience in Security risk assessment investigation?, Do you have a Bachelor’s degree?, * Bachelor’s degree in Management Information Systems, Computer Science, or a related field, or an equivalent combination of education and experience.

• A minimum of 5 years of progressively responsible experience in information security, security audit, or information security risk management/compliance.
• Strong working knowledge and hands-on experience with PCI-DSS compliance frameworks and associated organizational requirements.
• In-depth understanding of risk and controls, with practical experience applying relevant security standards and frameworks such as COSO, COBIT, ISO, NIST, and ITIL.
• Experience conducting information security risk assessments and facilitating or responding to information security audits.
• Adaptability and ability to manage multiple parallel tasks in a dynamic environment, while clearly communicating status, concerns, and solutions.
• Proactive approach to ongoing professional development in information security concepts, industry trends, and regulatory changes., * Professional certifications such as CISSP, CRISC, SEC+, PCI-DSS ISA/PCIP or similar accreditation are highly desirable.
• Demonstrated understanding of information security regulatory requirements and industry best practices.
• General familiarity with banking and financial services processes and knowledge of related data protection and risk management considerations is a plus.

Pulled from the full job description

• Health insurance
• 401(k) matching
• Paid time off
• Vision insurance
• Career development plan, * 401(k) matching
• Health insurance
• Paid time off
• Vision insurance