Cybersecurity Risk Analyst II

First Hawaiian Bank • Honolulu, HI

2d • Onsite

About The Position

First Hawaiian Bank is seeking a Cybersecurity Risk Analyst II to join our IT Governance & Compliance Department. This role is responsible for building and strengthening relationships across the Bank with technical leads and business partners, to understand technology stacks, designs, and review processes in support of the Bank’s cyber risk management practices. The role will assist management in the development, implementation, and execution of a measurements-based cyber risk management program. The primary responsibility will be to review and assesses new and existing vendor engagements and collaborate with technical leads and business partners to ensure comprehensive vendor portfolio management.

Requirements

• Bachelor’s degree in computer science, management information systems (MIS), engineering, statistics or related field, or equivalent work experience required.
• Two (2) or more years of experience in information security required.
• Working knowledge of requirements for Federal Financial Institutions Examination Council (FFIEC) IT examination, Gramm-Leach-Bliley Act (GLBA) Information Security Standards and Sarbanes-Oxley Section 404 (“Management Assessment of Internal Controls”).
• Experience designing, implementing, and managing risk management processes and workflows.
• Cyber risk management experience
• Knowledgeable in risk quantification modeling and platforms (e.g., strong understanding of basic probability, calibrated estimations, monte carlo simulations, etc.)
• Able to plan, organize and budget
• Excellent written and verbal communication with demonstrable experience collaborating with technically oriented as well as business audiences
• Strong critical thinking and analytical skills
• Able to handle confidential matters judiciously
• Possesses attention to detail with excellent follow-through
• Able to work under pressure with multiple deadlines
• Excellent time management skills
• Demonstrated ability to work under pressure and manage multiple deadlines to completion in a timely manner with quality results
• Proficiency in Microsoft 365 suite of applications

Nice To Haves

• Certified Information Systems Security Professional (CISSP), ISACA Certified in Risk and Information Systems Control (CRISC), or comparable security certification desired.

Responsibilities

• Building and strengthening relationships across the Bank with technical leads and business partners, to understand technology stacks, designs, and review processes in support of the Bank’s cyber risk management practices.
• Assist management in the development, implementation, and execution of a measurements-based cyber risk management program.
• Review and assess new and existing vendor engagements and collaborate with technical leads and business partners to ensure comprehensive vendor portfolio management.
• Performs cybersecurity risk assessments and ongoing monitoring.
• Coordinates with managers and staff of IT, business units, and executive management.
• Interacts with consultants and vendors as required.
• Develop and implement security plans and projects.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level