Information Security Assurance Analyst - Sugar Land or Lubbock

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time Security Analyst LUBBOCK ANNEX, Lubbock, TX, US

3 days ago Requisition

Prosperity Bank is an Equal Opportunity Employer.

POSITION PURPOSE

The Information Security Assurance Analyst serves as an independent second line of defense resource responsible for assessing cybersecurity controls, evaluating risk management effectiveness, performing assurance activities, and monitoring compliance with cybersecurity policies, standards, regulatory requirements, and industry frameworks. The role conducts cybersecurity risk and control assessments, evaluates control design and effectiveness, monitors remediation of identified issues, and provides objective analysis, reporting, and recommendations to support risk-informed decision-making.

The position collaborates with Information Technology, Enterprise Risk Management, Information Security, and business stakeholders to strengthen cybersecurity governance, risk management, and control oversight across the Bank.

ESSENTIAL FUNCTIONS AND BASIC DUTIES

• Evaluate cybersecurity controls, technology architectures, control designs, governance processes, and risk management practices to assess design adequacy, operating effectiveness, risk mitigation, alignment with the Bank's risk appetite, and opportunities for control and risk management improvement.
• Assess cybersecurity risks associated with technology initiatives, third parties, significant changes, and emerging technologies.
• Identify and prioritize cybersecurity risk exposures, recommend risk mitigation strategies, and monitor and validate remediation activities and corrective actions.
• Review and evaluate evidence supporting cybersecurity control implementation and effectiveness to determine compliance with regulatory, policy, and framework requirements.
• Review the adequacy of corrective action plans and validate closure of cybersecurity findings, issues, and risk treatment activities.
• Partner with cross-functional teams to assess compliance with cybersecurity standards and evaluate the effectiveness of security controls supporting business processes, technology solutions, and third-party services.
• Collaborate across operational, third-party, and data governance risk domains to evaluate risk management practices and support risk assurance activities.
• Strengthen cybersecurity governance by providing independent, risk-based assessments and recommendations to improve control effectiveness and risk management practices.
• Monitor emerging threats, attack vectors, and vulnerabilities to evaluate potential impacts to the Bank and identify areas requiring additional risk oversight or control improvements.
• Develop assurance reports, risk observations, findings, and recommendations for Information Security leadership and governance committees.
• Develop, maintain, and report risk assurance metrics and dashboards that provide meaningful insight into cybersecurity risk, control effectiveness, and remediation activities.
• Serve as a cybersecurity assurance subject matter expert during regulatory examinations, audits, and independent assessments.
• Maintain effective communication with internal and external stakeholders to ensure timely and accurate cybersecurity risk awareness.
• Participate in security meetings and contribute to the development of risk assurance policies and procedures.

The above statements describe the general nature and level of work only. They are not an exhaustive list of all required responsibilities, duties, and skills. Other duties may be added, or this job description amended at any time.

SUPERVISORY RESPONSIBILITIES:

This position has no supervisory role.

QUALIFICATIONS

Education/Certification: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, a related discipline, or the equivalent of combined education and related work experience.

Professional certifications such as CISSP, CRISC, CGRC, CISA, CISM, Security+, CySA+, GPEN, GSEC, or equivalent certifications are preferred.

Experience

Required:

Minimum of 3 years of experience in information security, cybersecurity risk management, security assurance, governance, risk and compliance (GRC), information technology auditing, security architecture, security engineering, or a related cybersecurity discipline.

Experience performing cybersecurity risk assessments, control evaluations, control effectiveness reviews, assurance activities, compliance assessments, audit support, or related oversight and risk management functions.

Experience applying cybersecurity frameworks and standards, including the Cyber Risk Institute (CRI) Profile, NIST Cybersecurity Framework (CSF), FFIEC guidance, CIS Critical Security Controls, or similar industry frameworks.

Experience evaluating cybersecurity controls, reviewing evidence, assessing remediation activities, and…