Information Security Analyst

Information Security Analyst

WebBank (the "Bank") is a Utah chartered Industrial Bank headquartered in Salt Lake City, Utah. As "The Bank Behind the Brand®", WebBank is a national issuer of consumer and small business credit products through Strategic Partner (Brand) platforms, which include retailers, manufacturers, finance companies, software as a service (SaaS) and financial technology (FinTech) companies. The Bank is a leading player in the digital lending space, driving innovation in financial products through embedded finance with Strategic Partner platforms. WebBank engages in a full range of banking activities including consumer and commercial loan products, revolving lines of credit, credit cards, private-label card issuance, auto-refinancing and more. The Bank provides capital in the form of asset-backed lending and other credit facilities to Strategic Partner platforms, credit funds, and other lenders with a targeted focus on specialty finance assets. The Bank is also a leading provider of commercial insurance premium finance products through its wholly owned subsidiary National Partners.

Job Summary

The Information Security Analyst helps maintain WebBank's information security governance program. This role supports control activities that protect information, Bank systems, and Strategic Partner programs by reviewing evidence, supporting risk assessments, validating access, tracking issues, documenting control activities, and helping to translate security requirements into measurable actions.

Working under the direction of Information Security leadership, the analyst works with technology, business, vendor, and Strategic Partner stakeholders to help ensure security information is complete, exceptions are documented and escalated appropriately, and assigned action items are tracked to resolution. The role requires sound judgment, strong organizational skills, professional follow-up, and the ability to translate security expectations into clear, documented outcomes.

This role is well suited for a curious information security, technology risk, audit, or IT professional with strong analytical judgment, attention to detail, clear communication skills, and an interest in strengthening security governance practices in a regulated banking environment.

Primary Responsibilities

You Will:

• Support WebBank's Information Security Governance program by maintaining control documentation and tracking assigned security activities against established requirements.
• Assist with security risk assessments for Bank systems, business processes, vendors, and Strategic Partner programs by gathering information, evaluating control evidence, and documenting observations.
• Perform user and privileged access reviews, validate access appropriateness, document exceptions, and coordinate remediation with system and business owners.
• Track security issues and remediation plans related to security exceptions, audit and examination findings, risk assessment observations, and control gaps.
• Prepare security reporting and support materials for management, audit, and regulatory examination activities, including metrics, dashboards, issue summaries, and requested documentation.
• Support data protection, policy and procedure maintenance, incident response readiness, business continuity, and disaster recovery activities through documentation, exercise and testing support, and follow-up on assigned items.
• Use approved security, GRC, reporting, collaboration, and AI-enabled productivity tools to organize evidence, support documentation, prepare reporting, communicate status, and improve workflow efficiency in accordance with Bank policies, confidentiality requirements, and human review expectations.

Company Perks

You Get:

• Paid Time Off (PTO) - Generous paid time off plus paid parental leave
• Health insurance – Plans include an employer paid medical option, dental and vision coverage, plus we offer health savings accounts
• 401(k) – WebBank matches up to the first 6 percent of employee contributions and both the employee's contributions and WebBank's match are fully vested immediately
• Life and Disability Insurance – Life insurance and long and short-term disability insurance plans are 100% employer paid
• Tuition Reimbursement – WebBank provides reimbursement for classes needed to obtain certain degrees, up to $5,250 per academic year

Qualifications

You Have:

• Experience: Minimum of 3 years of relevant experience in information security, information technology, technology risk, IT audit, compliance, third-party risk management, cybersecurity, or a related discipline.
• Education: A bachelor's degree in Information Systems, Information Technology, Cybersecurity, Risk Management, or a related field.
• Technical Skills: Working knowledge of information security concepts such as privileged access, multi-factor authentication, vulnerability management, incident response concepts, security monitoring, and basic network or cloud security.
• Analytical Skills: Ability to review information from multiple sources, identify inconsistencies or control gaps, ask good questions, evaluate risk implications, and document clear conclusions.
• Communication and Collaboration: Strong written and verbal communication skills, including the ability to work professionally with technical, business, vendor, and control stakeholders.
• Risk Management Mindset: Interest in learning how information security supports regulatory compliance, customer protection, third-party oversight, and enterprise risk management in a banking environment.
• Execution and Judgment: Strong organization, attention to detail, follow-through, and discretion when reviewing access, documenting issues, tracking remediation, and handling confidential information.

Even Better:

• Familiarity with FFIEC, FDIC, GLBA, NIST, or other information security frameworks and regulatory expectations.
• Familiarity with Diagramming
• Experience in banking, financial services, fintech, embedded finance, third-party risk oversight, compliance, audit, or technology operations