Information Security Risk & Compliance Analyst

Information Security Risk & Compliance Analyst Job Category: Technology Requisition Number: INFOR005128 Full-Time On-site Locations Showing 1 location Description The Identity Access Management (IAM) Analyst is responsible for the development, implementation, and maintenance of the organization’s IAM program. This includes the review and attestation of rights and roles in enterprise systems and applications, as well as the development and implementation of technology solutions, policies and procedures to ensure that access is granted and maintained in a secure and compliant manner. Responsibilities Review and attest to the accuracy and completeness of rights and roles in enterprise systems and applications, ensuring that only authorized users have access to sensitive data and systems, and that access rights are revoked when employees leave the organization. Develop and implement policies and procedures to ensure that access is granted and maintained in a secure and compliant manner, including defining access rights, procedures for granting and revoking access, and training employees on how to follow the policies. Work with business stakeholders to understand their needs and requirements for access to enterprise systems and applications, and develop solutions that meet those needs while maintaining security. Communicate security risks and mitigation strategies to business stakeholders, keeping them informed of the latest security threats and the organization’s mitigation actions. Conduct risk assessments to identify and assess the security risks associated with access to enterprise systems and applications, assessing the likelihood and impact of potential threats and developing mitigation strategies. Stay up-to-date on the latest security threats and trends by reading security blogs and articles, attending security conferences, and taking security training courses. Conduct training and awareness sessions for employees on security best practices, teaching them to identify and report suspicious activity and protect their personal information. Qualifications Bachelor’s degree in Information Security, Computer Science, or a related field; degree may be substituted for 5+ years of commensurate experience. 3+ years of experience in Identity Access Management (IAM) or related cybersecurity area. Experience with risk assessment, policy development, and implementation. Experience with enterprise systems and applications. Strong analytical and problem‑solving skills. Excellent written and verbal communication skills. Ability to work independently and as part of a team. General understanding of risk management and knowledge of security methodology frameworks and regulatory requirements such as NIST, CIS, HIPAA, PCI, and FFIEC. Minimum of 3 years of relevant US‑based experience. This position is on-site located in Oklahoma City; must reside within the area to be considered. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities. This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor. #J-18808-Ljbffr MidFirst Bank