Cybersecurity Risk Analyst- Northrim Building

At Northrim Bank, our vision is to be Alaska’s premier bank and employer of choice. We are looking for professional and knowledgeable employees who take pride in their work. We believe in providing value for our customers and communities.

Employee Benefits:

• Medical, Dental and Vision insurance, including FSA (Flex Spending Account)
• Paid Time Off to include select paid holidays
• Retirement Benefits with generous 401K match

Some Other Favorite Employee Benefits Include

Paid Parental Leave, Education Assistance, Employee Assistance Program, Employee Wellness Program and much more!

Position Summary

The Cybersecurity Risk Analyst supports the Company’s cyber and technology risk measures across multiple platforms and coordinates with appropriate departments to ensure timely risk remediation. This position is responsible for initial and recurring cybersecurity vendor due diligence, acts as the Company’s security awareness advocate and supports the Company’s disaster recovery planning and insurance program.

The following duties are intended to provide a representative summary of the major duties and responsibilities and ARE NOT intended to serve as a comprehensive list of all duties performed by all employees in this classification. Incumbent(s) may not be required to perform all duties listed and may be required to perform additional duties. 

Essential Duties and Responsibilities

Cybersecurity Risk

• Research and monitor risk trends and risk exposures in the banking, mortgage industry and business lines in which the Company is doing business. Evaluate Northrim’s vulnerability/exposure to identified risks and disseminate periodic updates to relevant stakeholders.
• Apply cyber risk management strategies to new technology threats. Support and update Company-wide incident response/cyber exercises, drills, and table-top training.
• Track and report ongoing patch management efforts. Identify areas for improvement and facilitate working groups to ensure timely and effective remediation.
• Implement and maintain effective incident response plans and playbooks.

Cybersecurity Due Diligence and Vendor Management

• Identify and assess risks associated with third-party vendor relationships.
• Conduct initial and recurring due diligence on third party service providers. Coordinate with Application Sponsors and Managers to ensure timely evaluation of risks are addressed and documented.
• Provide input and feedback to aid in the selection of new third party service providers.
• Maintain and update inventory of all Company third party service providers and vendors.  
• New & Existing Product/Venture Analysis – Evaluate risk potential for products/services/ventures. Assist managers in risk analysis, developing appropriate risk measurements and acceptable risk tolerance levels. 

Security and Awareness Training

• Maintain a comprehensive Company-wide security awareness and training program.
• Design and conduct internal social engineering tests, e.g. email phishing, vishing, etc. 
• Educate users on cybersecurity best practices. Conduct security awareness training and coaching, as needed.
• Support internal security posture testing and validation. 
• Facilitate meetings such as Ops & Tech, Risk Remediation and other meetings, as needed.
• Periodically inspect workplaces to ensure information security best practices are being followed.

Insurance Functions

• Manage and administer insurance policies, provide needed data for policy renewals and bind coverage.
• Identify insurable risks and acquire coverage, when appropriate.
• Initiate the claim process on covered losses and monitor situation through resolution.
• Complete online, written and in-person compliance training within established timeframes.
• Other duties as assigned.

Qualifications 

Education

• Bachelor’s degree or specialized training in IT, Computer Science, Cybersecurity, or related field. 

Experience

• Six years of specialized work in cybersecurity or risk management related role. Experience with financial institutions preferred.
• Experience with contingency and continuity of operations planning require