Enterprise Information Security & Technology Risk Analyst

First Hawaiian Bank • Honolulu, HI

3d • $85,000 - $115,000

About The Position

First Hawaiian Bank is seeking an Enterprise Information Security & Technology Risk Analyst to join its Enterprise Information Security & Technology Risk Department. The role serves as a key member of the Bank’s second line of defense, providing independent oversight of enterprise technology risk and information security programs. It evaluates the effectiveness of technology risk management practices, control environments, and remediation strategies across cybersecurity, IT risk, data risk, third-party risk, and business continuity domains. Reporting to the Enterprise Information Security & Technology Risk (EISTR) Manager, the Analyst acts as a trusted advisor to senior leadership by providing effective challenge, strategic risk guidance, and independent assessment. The position helps ensure the Bank’s technology risk posture aligns with enterprise risk appetite, regulatory expectations, and evolving threat landscapes, while strengthening organizational resilience, advancing risk governance, and fostering a proactive, risk-aware culture across the enterprise.

The pay range is $85,000–$115,000 per year, commensurate with experience. The hiring manager will determine the position level based on the candidate’s qualifications. The stated work schedule is Monday through Friday, 8:00 a.m. to 5:00 p.m.; hours may vary.

Requirements

• Bachelor’s degree in computer science, information security, or a related field, or an equivalent combination of education and experience.
• At least 2 years of progressive experience in IT operations, compliance, anti-money laundering, information security, and/or risk management.
• At least 3 years of progressive experience in technology risk management, information security, financial crimes program oversight, regulatory compliance, or operational risk.
• Proven experience interacting with cross-functional teams, regulators, and senior executives.
• Direct experience in financial services or another highly regulated industry.
• Expertise in one or more of the following: cybersecurity governance and threat management; enterprise technology risk management frameworks; vendor or third-party risk oversight; data risk, privacy, and governance; or business continuity planning and operational resilience.
• Enterprise-level strategic planning, financial management, and budgeting expertise.
• Risk analytics, measurement, and executive reporting capabilities, including development of KRIs and risk insights for senior leadership.
• Ability to collaborate effectively across business units and build strong partnerships with Enterprise Technology, business leaders, and risk functions.
• Ability to make sound, timely decisions in high-risk and high-pressure environments.
• Strong execution discipline, attention to detail, and accountability for outcomes.
• Ability to manage multiple priorities and deadlines in a complex, regulated environment.
• Proficiency in Microsoft 365 and enterprise risk management tools.
• Demonstrated expertise in second-line independent risk oversight, including effective challenge of first-line decisions and risk identification, escalation, and reporting to executive leadership.
• Advanced analytical, problem-solving, and strategic decision-making skills.

Nice To Haves

• Master’s degree in information systems, cybersecurity, business administration, or a related discipline.
• Professional risk designation such as CISSP, CISM, CRISC, or CISA.

Responsibilities

• Provide independent second-line oversight of enterprise technology risk and information security programs.
• Evaluate the effectiveness of technology risk management practices, control environments, and remediation strategies across cybersecurity, IT risk, data risk, third-party risk, and business continuity.
• Provide effective challenge, strategic risk guidance, and independent assessment to senior leadership.
• Help ensure the Bank’s technology risk posture aligns with enterprise risk appetite, regulatory expectations, and evolving threat landscapes.
• Strengthen organizational resilience, advance risk governance, and foster a proactive, risk-aware culture across the enterprise.
• Support risk identification, escalation, and reporting to executive leadership.
• Collaborate across business units and risk functions to drive risk-informed decisions and remediation strategies.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level