Information Security Risk Analyst

Primary Purpose of Job

Supports the company’s information security program to ensure that policies, procedures, standards and practices are in place to adequately identify, assess, mitigate, manage, monitor and report on key information security risks.

Major Job Accountabilities

• Works with IT and internal operations to ensure safeguarding of all confidential, proprietary, privileged, and protected information assets, including customer data. Monitors essential processes to ensure compliance with policies, standards, practices, and guidelines. Assists in verifying compliance with information security requirements of applicable laws, regulations, and Bank policies and procedures, including but not limited to GLBA, FACTA, PCI DSS, Anti-Money Laundering laws and regulations, Bank Secrecy Act, and USA PATRIOT Act.
• Develops and performs information security and vulnerability assessments, including testing of applications, systems, and infrastructure to ensure appropriate protection of sensitive customer and company information. Conducts risk analyses and recommends remediation for deficiencies. Tracks and assesses remediation(s) to ensure compliance with policies and operational standards.
• Performs information security risk management activities including information security risk assessments, vendor risk reviews, and monitoring remediation of identified gaps and issues.
• Develops reports on key program effectiveness metrics, including analytics for actionable insights.
• Ensures technical enforcement and effectiveness of internal security controls to maintain integrity of organizational networks, systems, and applications.
• Develops and conducts bank-wide / departmental information security training. Maintains current knowledge of evolving information security risks, particularly regarding cyber security, trends with risk mitigation tools, and changes to industry regulations affecting financial institutions.
• Recommends, maintains, develops, and revises all information security governance documentation.
• Builds and matures a culture focused on the proactive awareness and improvement of the information security risk environment.
• May occasionally work evening / night hours as needed to address critical situations.

Experience Required

Minimum of four (4) years of the following experience :

Required Skills or Training

EOE, including disability / veterans

At American Savings Bank, we welcome and support all individuals and celebrate the diversity of our team members, customers and community. We are committed to ensuring that our online application process is accessible and provides an equal employment opportunity to all job seekers. If you need assistance searching for a job or submitting an application, please contact us by calling 808-538-2000 and a member of our Recruitment team will follow up with you. Mahalo for your interest in American Savings Bank!