IT Risk Management Analyst II

at  Jack Henry Associates

At Jack Henry, we deliver technology solutions that are digitally transforming and empowering community banks and credit unions to provide enhanced and streamlined user experiences to their customers and members. Our best-in-class products are just the start as we lay the groundwork for the future of digital banking and payments. We hope you’ll join us. We can’t do it without you.
The Enterprise IT and Security Risk Management team is seeking an analyst to assist in the development, implementation, and continued operations of the Technology and Security Risk Management function. In this role, you would work closely with our enterprise risk office, cyber security, and IT teams. Daily responsibilities would consist of assisting with risk assessments, monitoring compliance, and investigating and quantifying risks. The ideal candidate will be able to work independently with an eye for detail and can bring deep enterprise operations knowledge, drive project completion and enjoys working within a collaborative team.
This position can be based to work out of any Jack Henry office or remote from any US location. Salary range for this position is $69-99k, depending on candidate experience and geographic location.

What you’ll be responsible for:

• Works closely with operations staff, IT management and information security teams.
• Collaborates with business, functional and risk leaders, and colleagues to maintain an enterprise technology and information security risk framework/program.
• Review technology and information security risk related policies and procedures and make recommendations for changes.
• Demonstrate working knowledge in any of the following: Networks and Network Security, Identity & Access Management, Data Management, Incident Management and Threat & Vulnerability Management.
• Oversee the process and risk owners in the first line to ensure technology risk issues (cyber risks, data risks, IT services risks, infrastructure risks, e.g.) are identified and risks are mitigated according to prescribed policies and programs.
• Interact with Corporate Audit Services and FBA on risk related audits and exams.
• Evaluate challenges and identify root cause analysis including people, process, and technology.
• Collaborates on complex security and IT operations risk assessments.
• Will collaborate with senior leadership groups in completion of projects.
• Prepares assessment guidelines and processes.
• Evaluates internal controls and documentation to ensure adherence to regulations and internal processes.
• Help monitor risk-based controls which are fully auditable and compliant with business and regulatory standards
• Analyze business processes and systems and guide needed improvements to properly mitigate risk in alignment with the risk appetite
• Ensure technologies and processes used meet all information risk and information management requirements
• Monitor reports with key risk indicators from the Information Security and Information Technology teams which provide early warning of impending risks
• May perform other job duties as assigned.

CULTURE OF COMMITMENT

Ask our associates why they love Jack Henry, and many will tell you it is because our culture is exceptional. We do great things together. Rising to meet challenges and seeking opportunities is part of who we are as an organization. Our culture has helped us stay strong through challenging times and we credit our dedicated associates for our success. Visit our Corporate Responsibility site to learn more about our culture and commitment to our people, customers, community, environment, and shareholders.

EQUAL EMPLOYMENT OPPORTUNITY

At Jack Henry, we know we are better together. We value, respect, and protect the uniqueness each of us brings. Innovation flourishes by including all voices and makes our business - and our society - stronger. Jack Henry is an equal opportunity employer and we are committed to providing equal opportunity in all of our employment practices, including selection, hiring, performance management, promotion, transfer, compensation, benefits, education, training, social, and recreational activities to all persons regardless of race, religious creed, color, national origin, ancestry, physical disability, mental disability, genetic information, pregnancy, marital status, sex, gender, gender identity, gender expression, age, sexual orientation, and military and veteran status, or any other protected status protected by local, state or federal law.
No one will be subject to, and Jack Henry prohibits, any form of discipline, reprisal, intimidation, or retaliation for good faith reports or complaints of discrimination of any kind, pursuing any discrimination claim, or cooperating in related investigations.
Requests for full corporate job descriptions may be requested through the interview process at any time

• Works closely with operations staff, IT management and information security teams.
• Collaborates with business, functional and risk leaders, and colleagues to maintain an enterprise technology and information security risk framework/program.
• Review technology and information security risk related policies and procedures and make recommendations for changes.
• Demonstrate working knowledge in any of the following: Networks and Network Security, Identity & Access Management, Data Management, Incident Management and Threat & Vulnerability Management.
• Oversee the process and risk owners in the first line to ensure technology risk issues (cyber risks, data risks, IT services risks, infrastructure risks, e.g.) are identified and risks are mitigated according to prescribed policies and programs.
• Interact with Corporate Audit Services and FBA on risk related audits and exams.
• Evaluate challenges and identify root cause analysis including people, process, and technology.
• Collaborates on complex security and IT operations risk assessments.
• Will collaborate with senior leadership groups in completion of projects.
• Prepares assessment guidelines and processes.
• Evaluates internal controls and documentation to ensure adherence to regulations and internal processes.
• Help monitor risk-based controls which are fully auditable and compliant with business and regulatory standards
• Analyze business processes and systems and guide needed improvements to properly mitigate risk in alignment with the risk appetite
• Ensure technologies and processes used meet all information risk and information management requirements
• Monitor reports with key risk indicators from the Information Security and Information Technology teams which provide early warning of impending risks
• May perform other job duties as assigned