Risk & Compliance Analyst; IT

Description

This is an in-office position located in Springfield, IL.

The Risk & Compliance Analyst safeguards organizational assets and ensures regulatory compliance by managing information security, risk assessments, policy reviews, and audit operations. This role also oversees third-party vendor compliance, delivers security training, and supports business continuity. Strong analytical, communication, and problem-solver skills are essential.

• Asset Management:
  Maintain an inventory of organizational information assets. Maintain workflow/process diagrams for all critical bank functions.
• Business Continuity:
  Maintain business continuity plans to ensure organizational resilience. Facilitate periodic disaster recovery testing.
• Risk Assessment Management:
  Conduct risk assessments to assist in managing risk mitigation strategies to protect organizational assets.
• Policy Management:
  Manage review process of all security policies, standards, and procedures in line with industry standards
• Change Management:
  Monitor change management processes to ensure that security impacts are assessed and managed.
• Operational Security Monitoring:
  Continuously monitor security operations to identify and address potential threats and verify effective controls operation.
• Identity and Access Management:
  Manage identity and access controls to safeguard sensitive information. Conduct User Access Reviews periodically to ensure compliance with Role Based Access Controls.
• Audit Operations:
  Participate in external audits, ensuring compliance with regulatory requirements.
• Audit Remediation:
  Implement and track remediation efforts for audit findings to ensure compliance and security.
• Third-Party Management:
  Assess and manage third-party vendors to ensure they meet security requirements.
• Security Awareness Training:
  Deliver security awareness training programs to educate employees on best practices.
• Framework and Regulatory Compliance Management:
  Ensure compliance with key frameworks including NIST 800-53, NIST CSF, and regulatory compliance such as GLBA, PCI, and HIPAA.
• Management Reporting:
  Assist in preparation of monthly management reports.
• Perform other duties as assigned.

• Bachelor’s degree in Information Security, Information Assurance, or a related field, or equivalent work experience.
• Previous banking experience preferred but not required.
• Project management skills preferred but not required.
• Experience in Microsoft Office Suite and Visio.
• Analytical/attention to detail.
• Excellent problem-solving skills and the ability to work both independently and as part of a team.
• Strong communication skills, with the ability to convey complex security concepts to non-technical stakeholders.

• Familiarity with regulatory compliance.
• Experience with hybrid cloud environments.
• Understanding of NIST frameworks (NIST 800-53, NIST CSF).
• Understanding of regulatory compliance such as GLBA, PCI, and HIPAA.

• Demonstrates ownership and accountability, proactively identifying and addressing risks before they escape.
• Anticipates and responds to the needs of internal and external customers.
• Stays informed of emerging technologies, best practices, and regulatory changes; devotes time to professional development.
• Upholds ethical standards, owns mistakes, and communicates status and challenges openly.
• Responds swiftly to critical situations, demonstrating agility and a solutions-driven mindset.
• Provides timely, jargon-free updates to stakeholders and non-technical colleagues.
• Fosters creativity and continuous improvement.

• This role may require occasional after-hours or weekend work to support maintenance activities, critical issues, or after-hours walkthroughs/controls reviews.
• Opportunity to work in a dynamic, fast-paced environment with cutting-edge technologies.

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions. The employee is required to regularly lift and/or move up to 10 pounds, frequently lift and/or move up to 25 pounds, and occasionally lift and/or move up to 50 pounds.

$50,000.00-$65,000.00 annually. The estimated hiring range is the budgeted amount for this position. Final offers are based on various factors, including skill set, experience, location, qualifications, and other job-related reasons.

INB provides health, dental, vision, and life insurance benefits to all full-time employees. Coverage is also extended to eligible dependents. Active employees make premium contributions based on plan selections. Benefits may be accessed at

The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all…