GRC Analyst

Position Summary

The GRC Analyst is responsible for ensuring that Busey Bank implements, manages, and enforces information security and cybersecurity controls to effectively align to industry standards. This position will monitor the performance of key Information Security and Information Technology processes and controls, lead projects, drive change, and administer technical systems designed to maintain the confidentiality, integrity, and availability of all organizational information systems and assets.

Duties & Responsibilities

• Administer and optimize SailPoint IdentityNow for identity lifecycle management.

• Support access provisioning, de-provisioning, and role-based access control (RBAC).

• Lead access certification campaigns and ensure audit readiness.

• Coordinate and execute periodic user access reviews across critical systems.

• Collaborate with business and IT stakeholders to validate access appropriateness.

• Monitor, Track and remediate access violations and provide audit documentation.

• Oversee the completion of information technology and security risk assessments leveraging common industry frameworks such as Center for Internet Security (CIS), Cyber Risk Institute (CRI), or NIST.

• Document risks, recommend mitigation strategies, and track remediation.

• Define, track, and report on key performance and risk indicators (KPIs/KRIs).

• Build dashboards and executive reports to communicate risk trends and control effectiveness.

• Partner with stakeholders to improve data quality and decision-making.

• Maintain and enhance the enterprise control framework and process taxonomy.

• Map controls, risks, policies, and regulatory requirements.

• Support control rationalization and harmonization across business units.

• Develop and deliver engaging security awareness training tailored to various audiences.

• Manage phishing simulation campaigns and analyze user behavior trends.

• Provide targeted follow-up training and report on program effectiveness

• Provide input on enhancements to security posture of the Bank through configuration changes and new product recommendations.

• Lead Information Security projects as assigned.

• Strong analytical and reporting skills; experience with Power BI or Tableau is a plus.

• Assist with the review and evaluation of information security aspects of third-party service providers, contractors, and other suppliers who have access to company and customer information and systems.

• Assist with the collection of documentation for audits and regulatory examinations.

• Develop and maintain trusted, positive relationships with associates, auditors, examiners & vendors.

Education & Experience

Knowledge of:

• Knowledge of security concepts such as Microsoft Azure and Microsoft 365 computing environments.

• Project management experience, leading small to mid-size implementations and changes.

• General knowledge of cybersecurity and information security metrics reporting.

• Proficient technical skills in Microsoft Office (Word, Excel, PowerPoint), Microsoft 365 Copilot.

Ability to:

• Ability to conduct information security training of end users both in person and remotely.

• Self-starter motivated to produce results, meet all established goals, objectives, and expectations as well as willingness to expand skills as the Bank's technology platform expands.

Education & Training:

• At least 3 years of work experience, preferred

• Bachelor's Degree, or equivalent work experience preferred.

• Security certifications such as CGRC, CISA, CRISC, or similar are welcomed.

Benefits and Compensation

Salary offered is based on factors, including but not limited to, the job duties, required qualifications and relevant experience, and local market trends. The role may be eligible for bonus or incentives based on company and individual performance.

(Base Pay Range: $62,000-$87,000/annually)

Busey provides a competitive Total Rewards package in return for your time, talents, efforts and ultimately, results. Your personal and professional well-being-now and in the years to come-are important to us. Busey's Total Rewards include a competitive benefits package offering 401(k) match, profit sharing, employee stock purchase plan, paid time off, medical, dental, vision, company-paid life insurance and long-term disability, supplemental voluntary life insurance, short-term and long-term disability, wellness incentives and an employee assistance program. In addition, eligible associates may take advantage of pre-tax health savings accounts and flexible spending accounts. Visit BuseyTotal Rewardsfor more information.

Equal Opportunity

Busey values a diverse and inclusive workplace and strives to recruit, develop and retain individuals with exceptional talent. A team with diverse talent, working together, is essential to Busey's commitment of delivering service excellence. Busey is an Equal Opportunity Employer including Disability/Vets. VisitBusey.com/Careersto learn more about Busey's Equal Opportunity Employment.

Unsolicited Resumes

Busey Bank, and its subsidiaries, does not accept any liability for fees for resumes from recruiters or employment agencies ("Agency"), without a binding, written recruitment agreement between Busey and Agency describing the services and specific job openings ("Agreement"). Busey may consider any candidate for whom an Agency has submitted an unsolicited resume and explicitly reserves the right to hire those candidate(s) without any financial obligation to the Agency, unless an Agreement is in place. Any email or verbal contact with any Busey associate is inadequate to create a binding agreement. Agencies without an Agreement are requested not to contact any associates of Busey with recruiting inquiries or resumes. Busey respectfully requests no phone calls or emails.