Compensation Range

Minimum $60,795.00 - Mid Point $86,835.00 - Max $112,875.00

As part of UMB’s Corporate Information Security and Privacy (CISP) team, the mission is to identify threats, vulnerabilities, and risks and to help protect the people, information, and services within the organization. CISP works closely with all lines of business. This role will work especially close with UMB enterprise technology and information security teams to ensure data protection initiatives are present, usable and, understood within the organization.

The Information Security Risk Analyst will report to the Manager of Information Protection and will assist with activities associated with UMB’s Information Protection Program. The position is responsible for independently executing tasks to support UMB’s data protection initiatives, including key & certificate management, encryption, tokenization, and cloud security. This role is hybrid working Tue to Thu on-site at our 1010 Grand location in downtown Kansas City, MO.

How You’ll Spend Your Time

Collaborate and drive initiatives, working with people across multiple teams and diverse functions.
Maintain a well-rounded understanding of information security best practices and practical applications of security concepts.
Support the Information Security Program through the collection and assessment of performance indicators, metrics, and other evidence.
Assist in the documentation and assessment of UMB’s IT governance, risk management, and compliance program.
Assist in efforts to validate, identify remediation actions, and monitor gaps identified through security risk and controls assessments.
Support the continuous maturity and evolution of the Information Security and Privacy Program by challenging current approaches and proactively identifying improvement opportunities to drive assessment, monitoring, and response effectiveness and efficiency.
Provide input to the annual review of information security policies and procedures.
Perform gap analysis against regulatory expectations or industry standards.
Support and convey the security, data governance and privacy needs of cloud and on-premise data implementation.
Proactively identify efforts that will improve the effectiveness or efficiency of the organization's data security practices.
Other duties as assigned.

We’re excited to talk to you if

You possess a Bachelor’s degree in Management Information Systems, Accounting Information Systems, Computer Science or related discipline degree from an accredited college or university or equivalent experience.
You have 2 years’ experience in information technology, information security, audit, or risk.
Or, you have any combination of education and experience that would provide an equivalent background.
You have working knowledge of information security and technology risk.
You understand information and data security frameworks, industry best practices and the tools and techniques used to secure organizations.
You are able to think critically and demonstrate good judgement in evaluating situations and making decisions.
You have the ability to independently execute non-complex tasks with limited guidance and complex tasks with manager oversight and guidance.
You demonstrate self-management, organizational, and planning skills by effectively balancing commitments and meeting deadlines.
You are detail oriented with strong written and verbal communication skills with the ability to present opinions in a clear and concise manner.
You possess effective interpersonal skills with the ability to develop solid working relationships with others.
You are able to meet deadlines and handle multiple priorities.
You can succeed in a team environment or work as an individual contributor.
You demonstrate the initiative to proactively enhance knowledge and skills.

Bonus points for

Prior work experience in a security operations center (SOC), internal audit, or corporate governance, risk, and compliance (GRC).
An understanding of and practical experience with information security risk assessment and information security audits.
Demonstrated technical understanding of corporate networks and infrastructure.
General understanding of banking and financial services processes, and the related risks to securing and managing data.
General understanding of security assessment techniques, testing processes and remediation efforts.
General understanding of data security practices and cloud security requirements.
General understanding of banking and financial services processes, and the related risks to securing and managing data.
General understanding of security and privacy law or regulation such as GLBA, HIPAA, PCI and GDPR.
Knowledge of standards and framework such as COSO, COBIT, ISO, NIST, and ITIL.

Compensation Range

Minimum $60,795.00 - Mid Point $86,835.00

The posted compensation range on this listing represents UMB’s standard for this role, but the actual compensation may vary by geographic location, experience level, and other job-related factors. In addition, this range does not encompass the full earning potential for this role. Please see the description of benefits included with this job posting for additional information

UMB offers competitive and varied benefits to eligible associates, such as Paid Time Off; a 401(k) matching program; annual incentive pay; paid holidays; a comprehensive company sponsored benefit plan including medical, dental, vision, and other insurance coverage; health savings, flexible spending, and dependent care accounts; adoption assistance; an employee assistance program; fitness reimbursement; tuition reimbursement; an associate wellbeing program; an associate emergency fund; and various associate banking benefits. Benefit offerings and eligibility requirements vary.

Are you ready to be part of something more?

You're more than a means to an end—a way to help us meet the bottom line. UMB isn't comprised of workers, but of people who care about their work, one another, and their community. Expect more than the status quo. At UMB, you can expect more heart. You'll be valued for exactly who you are and encouraged to support causes you care about. Expect more trust. We want you to do the right thing, no matter what. And, expect more opportunities. UMBers are known for having multiple careers here and having their voices heard.

UMB and its affiliates are committed to inclusion and diversity and provide employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex (including gender, pregnancy, sexual orientation, and gender identity), national origin, age, disability, military service, veteran status, genetic information, or any other status protected by applicable federal, state, or local law. If you need accommodation for any part of the employment process because of a disability, please send an e-mail to talentacquisition@umb.com to let us know the nature of your request.

If you are a California resident, please visit our Privacy Notice for California Job Candidates to understand how we collect and use your personal information when you apply for employment with UMB.

UMB Bank

New Jobs

Info Security Risk Analyst (Hybrid)