Information Security Analyst

Overview

Bank Newport celebrates being a community bank since 1819. Yes, that’s 200+ years, and still growing. We offer new and exciting career opportunities and are committed to providing employees the resources and guidance to develop careers that are challenging and rewarding.

We empower and invest in you.

The Information Security Analyst supports the bank’s information security risk management and compliance program, with a focus on vendor risk, technology risk, third‑party due diligence, access reviews, contract support, control monitoring, and audit‑ready documentation. This role ensures vendors, technologies, systems, and business processes are assessed, documented, monitored, reported, and assigned to accountable owners in accordance with bank policies, regulatory expectations, and program requirements.

The analyst works with Information Security, Technology, Risk Management, Legal, Procurement, business owners, system administrators, and other partners to support a consistent, well‑documented risk management model focused on ownership, follow‑up, issue tracking, remediation, and continuous improvement.

The ideal candidate is detail‑oriented, organized, collaborative, and able to evaluate risks in a practical manner.

• All employees support bankwide risk‑management initiatives, including compliance, credit, liquidity, market, operations, and systems risk, as well as physical building safety and security. They also support the bank’s “Set your Sales” initiative and internal training to provide sales support to all departments.
• The Information Security Analyst performs all necessary tasks within the scope of authority to provide the highest level of service and responsiveness to colleagues, customers, and communities served by the bank.
• Assist the Information Security Officer in managing the bank’s information security program, ensuring effective governance, reporting, data quality, and audit response support.
• Manage the bank’s vendor management program and system application, including reporting, data quality, and consistency, and collaborate with business units to assist in vendor management responsibilities.
• Assist the Information Security Officer in developing, implementing, and managing the project management lifecycle and business initiative due‑diligence process.
• Support the Information Security Officer in business continuity planning, including plan reviews, testing, reporting, and board reporting.
• Maintain knowledge of federal and state laws and regulations related to vendor and third‑party management, risk management, business continuity planning, and other responsibilities.
• Conduct research on regulatory, methodological, and best‑practice topics, providing opinions, recommendations, and guidance to business areas and to the Information Security Officer or Director of Compliance & Risk Management.
• Coordinate risk assessments, including a bank‑wide non‑electronic customer information risk assessment, and track action items to remediate identified risks.
• Serve as system administrator and primary application specialist for all department third‑party applications, managing user access controls, security, maintenance, and updates.
• Stay abreast of compliance, industry, and best‑practice activities through professional association meetings, seminars, workshops, and relevant publications.
• Represent the bank in community and industry activities, promoting interest in the bank whenever possible.
• Perform related and unrelated duties as required.

• Bachelor’s degree or equivalent specialized coursework and training.
• Two or more years of relevant banking experience or equivalent.
• General knowledge of banking laws and regulations; experience with regulatory examinations and Gramm‑Leach‑Bliley Act preferred.
• Experience with vendor management and project management is a plus.
• Exposure to bank‑related operations and products.
• Strong analytical and decision‑making skills.
• Ability to conduct effective research and analysis, and clearly document supported conclusions and opinions.
• Excellent communication, interpersonal, and organizational skills; ability to multitask, act independently, and…