Information Security Risk Analyst

Sutton Bank - Columbus, OH

Full-time - Mid Level

Columbus, OH

Credit Intermediation and Related Activities

About the position

The position serves as a liaison between the Information Security Office and various department executives. The primary responsibility is to identify and test existing controls while understanding where controls need to be within processes as indicated by technology frameworks and applicable regulations such as ISO, NIST, FFIEC, and FDIC. Critical functions of this role include conducting gap analysis, project tracking, and executive reporting.

Responsibilities

• Analyze, assess and document business requirements in an unambiguous and clear manner to support the business.
• Identify controls or opportunities based on technical frameworks (i.e., ISO, NIST, etc.).
• Catalogue, test and monitor controls.
• Create and perform gap analysis and provide strategy to implement and mitigate identified risks.
• Define business architecture and functional design.
• Manage projects, develop project plans, and monitor performance.
• Monitor deliverables and ensure timely completion of projects.
• Conduct meetings and presentations to share ideas and findings.
• Conduct functional walk-throughs with various stakeholders.
• Analyze system impacts to other systems and procedures.
• Participate in training personnel on enhancements, and new systems or procedures.
• Create executive reporting and strategy documents.

Requirements

• Bachelor's Degree in information systems or related field or equivalent combination of education and experience/training.
• Valid Ohio's Driver's License.
• Three years of combined experience in requirements development, operations analysis, business management consulting, project management, testing controls or enterprise risk management.

Nice-to-haves

• Advanced knowledge of multiple end-to-end systems development life cycles.
• Strong understanding of and experience with process improvement and process mapping.
• Strong understanding and experience with creating complex process flows with control points via Visio Pro.
• Strong understanding and experience of enterprise risk management.
• Understanding of FinTech industry.