Sr. Information Security Risk Analyst (Hybrid/Remote)

$69,230 - $179,300/Yr

Umb Financial Corporation - Concord, NH

Full-time - Mid Level

Hybrid - Concord, NH

Credit Intermediation and Related Activities

About the position

The Sr. Information Security Risk Analyst at UMB Bank plays a crucial role in supporting the organization's Information Security Program. This position focuses on identifying and mitigating threats, vulnerabilities, and risks to protect the organization's data and services. The analyst will collaborate with various teams to ensure compliance with security standards and regulations, particularly PCI-DSS, while also advising stakeholders on risk management and treatment options.

Responsibilities

• Collaborate and drive security initiatives across multiple teams and functions.
• Advise business units and technology leaders on information security risks and propose acceptable risk treatment options.
• Support the information security program by collecting performance indicators and communicating actionable recommendations to leadership.
• Assist in PCI-DSS compliance and assessment activities across the organization.
• Maintain an understanding of information security best practices and relevant regulations.
• Respond to internal/external audits and third-party security assessments as needed.
• Manage multiple workstreams and communicate issues, risks, and status to stakeholders.

Requirements

• At least 5 years of experience in information security, security audit, or information security risk management/compliance.
• Bachelor's degree in Management Information Systems (MIS), Computer Science, or a related discipline, or equivalent work experience.
• Strong knowledge of risk and controls, including familiarity with COSO, COBIT, ISO, NIST, and ITIL frameworks.
• Ability to thrive in a changing environment and manage multiple tasks simultaneously.
• Practical experience with information security risk assessments and audits.

Nice-to-haves

• CISSP, CRISC, SEC+, PCI-DSS ISA/PCIP or applicable certifications/accreditation.
• Strong understanding of information security regulatory requirements and best practices.
• General understanding of banking and financial services processes and related risks.

Benefits

• Paid Time Off
• 401(k) matching program
• Annual incentive pay
• Paid holidays
• Comprehensive medical, dental, and vision insurance
• Health savings, flexible spending, and dependent care accounts
• Adoption assistance
• Employee assistance program
• Fitness reimbursement
• Tuition reimbursement
• Associate wellbeing program
• Associate emergency fund
• Various associate banking benefits