Information Security Analyst II (Remote)

This is a remote role that may be hired in several markets across the United States.

This role will work with the Information Security Governance, Risk, and Compliance team responsible for Information Security Standard Exceptions Management. Analyst will partner with InfoSec Leadership and their teams to identify and govern security exceptions in an open, collaborative environment where new ideas and solutions are both welcomed and rewarded. Responsible for providing oversight, guidance, and effective challenge to the Information Security Standard Exceptions Program.

• Collaborate with cross-functional teams to govern the Information Security Standard Exceptions Process.
• Validate the completeness and accuracy for all security exceptions through each step in the process workflow.
• Engage with internal stakeholders to gather input, address concerns, and ensure a comprehensive understanding and adoption of the Information Security Standard Exceptions Process.
• Develop and deliver training materials and programs to educate bank employees on Information Security Standard Exceptions Process
• Maintain meticulous documentation of Information Security Standard Exceptions Process, ensuring accessibility and accuracy for audits and compliance purposes.
• Develop, maintain, and report risk metrics in alignment with organization requirements and industry best practices.
• Collaborate with audit and compliance teams to provide necessary documentation and support during internal and external audits.
• Continuously review and enhance procedures based on feedback, emerging risks, and evolving industry dynamics.
• Stay informed about regulatory developments, emerging risks, and best practices in the banking and financial sector.

Bachelor's Degree and 4 years of experience in Information security OR High School Diploma or GED and 8 years of experience in Information security

Preferred Qualifications

• Knowledge of banking regulations, compliance frameworks, and industry standards, including Dodd-Frank, Basel III, AML, KYC, etc.
• Knowledge in cybersecurity frameworks: NIST 800-53, NIST-CSF.
• Strong analytical skills, with the ability to assess complex information and make informed decisions.
• Excellent written and verbal communication skills, with the ability to draft clear and concise communications to diverse stakeholders.
• Demonstrated ability to collaborate effectively with cross-functional teams and communicate complex concepts to non-technical audiences.
• Proficiency in Microsoft Office Suite (Word, Excel, PowerPoint, etc.) and familiarity with policy management software is a plus.
• Attention to detail, strong organizational skills, and the ability to manage multiple tasks in a fast-paced environment.
• Integrity, ethics, and a commitment to upholding the highest standards of professionalism and compliance.

This job posting is expected to remain active for 45 days from the initial posting date listed above. If it is necessary to extend this deadline, the posting will remain active as appropriate. Job postings may come down early due to business need or a high volume of applicants

The base pay for this position is generally between $95,000 and $130,000. Actual starting base pay will be determined based on skills, experience, location, and other non-discriminatory factors permitted by law. For some roles, total compensation may also include variable incentives, bonuses, benefits, and/or other awards as outlined in the offer of employment.

Benefits are an integral part of total rewards and First Citizens Bank is committed to providing a competitive, thoughtfully designed and quality benefits program to meet the needs of our associates. More information can be found at https://jobs.firstcitizens.com/benefits.