GRC Analyst

Location: Tomahawk

Position Summary
The GRC Analyst is responsible for ensuring that Busey Bank implements, manages, and enforces information security and cybersecurity controls to effectively align to industry standards. This position will monitor the performance of key Information Security and Information Technology processes and controls, lead projects, drive change, and administer technical systems designed to maintain the confidentiality, integrity, and availability of all organizational information systems and assets.


Duties & Responsibilities

• Administer and optimize SailPoint Identity Now for identity lifecycle management.

• Support access provisioning, de-provisioning, and role-based access control (RBAC).

• Lead access certification campaigns and ensure audit readiness.

• Coordinate and execute periodic user access reviews across critical systems.

• Collaborate with business and IT stakeholders to validate access appropriateness.

• Monitor, Track and remediate access violations and provide audit documentation.

• Oversee the completion of information technology and security risk assessments leveraging common industry frameworks such as Center for Internet Security (CIS), Cyber Risk Institute (CRI), or NIST.

• Document risks, recommend mitigation strategies, and track remediation.

• Define, track, and report on key performance and risk indicators (KPIs/KRIs).

• Build dashboards and executive reports to communicate risk trends and control effectiveness.

• Partner with stakeholders to improve data quality and decision-making.

• Maintain and enhance the enterprise control framework and process taxonomy.

• Map controls, risks, policies, and regulatory requirements.

• Support control rationalization and harmonization across business units.

• Develop and deliver engaging security awareness training tailored to various audiences.

• Manage phishing simulation campaigns and analyze user behavior trends.

• Provide targeted follow-up training and report on program effectiveness

• Provide input on enhancements to security posture of the Bank through configuration changes and new product recommendations.

• Lead Information Security projects as assigned.

• Strong analytical and reporting skills; experience with Power BI or Tableau is a plus.

• Assist with the review and evaluation of information security aspects of third-party service providers, contractors, and other suppliers who have access to company and customer information and systems.

• Assist with the collection of documentation for audits and regulatory examinations.

• Develop and maintain trusted, positive relationships with associates, auditors, examiners & vendors.

Education & Experience


Knowledge of:

• Knowledge of security concepts such as Microsoft Azure and Microsoft 365 computing environments.

• Project management experience, leading small to mid-size implementations and changes.

• General knowledge of cybersecurity and information security metrics reporting.

• Proficient technical skills in Microsoft Office (Word, Excel, PowerPoint), Microsoft 365 Copilot.

Ability to:

• Ability to conduct information security training of end users both in person and remotely.

• Self-starter motivated to produce results, meet all established goals, objectives, and expectations as well as willingness to expand skills as the Bank's technology platform expands.

Education & Training:

• At least 3 years of work experience, preferred

• Bachelor's Degree, or equivalent work experience preferred.

• Security certifications such as CGRC, CISA, CRISC, or similar are welcomed.

Benefits and Compensation

Salary offered is based on factors, including but not limited to, the job duties, required qualifications and relevant experience, and local market trends. The role may be eligible for bonus or incentives based on company and individual performance.

(Base Pay Range: $62,000-$87,000/annually)

Busey provides a competitive Total Rewards package in return for your time, talents, efforts and ultimately, results. Your personal and professional well-being-now and in the years to come-are important to us. Busey's Total Rewards include a competitive benefits package offering 401(k) match, profit sharing, employee stock purchase plan, paid time off, medical, dental, vision, company-paid…