Senior Technology Risk & Controls Analyst

Join Our Team!

We have a great team of friendly, talented and inspiring people at First United. As a learning organization, we take pride in offering exciting opportunities for employees to grow and follow their passions. That's one of the many reasons First United has been voted as one of the top places to work in Oklahoma since 2009! Browse this page to find out more about the First United culture and the many benefits of working here. Then, use our "Get Started" section to take your first step to being a part of First United.

The Position

Job Title

Senior Technology Risk & Controls Analyst

Job Description

SUMMARY

We are looking for a Senior Technology Risk and Controls Analyst to join the Enterprise Information Security Office in a second line of defense capacity. This individual will support the execution of IT Risk and Control Self-Assessments (RCSAs), maintenance of Enterprise Technology risk and control catalogue, development and reporting of Key Risk Indicators (KRIs), and advise Enterprise Technology and business units on the maturation of technology and cybersecurity controls to align with changing risks and regulatory requirements.

This individual will work under the guidance of a manager with limited direction and should have a self-starter mindset. This individual will collaborate heavily across first and second lines of defense in Information Technology and Information Security in a team of teams’ environment. They will have direct exposure to senior levels of management and should be adept in communicating regulatory and compliance matters.

A successful candidate will have a wide range of audit, regulatory, or hands on technical experience that allows them to translate regulatory and compliance requirements to the continually evolving technology landscape. They will have experience in financial services and a good understanding of regulatory and compliance requirements for financial institutions. Their experience will allow them to immediately help mature practices related to the Govern, Identify, Protect, Detect, Respond, and Recover functional areas.

This role is an exciting opportunity to mature information technology and cybersecurity control processes in a growing and stable organization. This role reports directly to the Technology Risk and Control Manager and will work closely with executing the overall agenda of the Enterprise Information Security Office, Enterprise Risk Management, and Information Technology.

MAJOR DUTIES AND RESPONSIBILITIES (ESSENTIAL FUNCTIONS)

• Support/Own the definition and maintenance of the technology risk and control environment.
• Assess the effectiveness of technology controls against regulatory requirements and policy statements.
• Support and co-ordinate responses to Regulator & Customer requests for information on control practices
• Analyze and report on compliance of cyber and technology controls against LoB (Lines of Business), Firmwide and Regulatory Standards
• Consult on technical security and regulatory compliance matters with IT Services teams.
• Maintain r