Governance Risk and Compliance Analyst

Alpine Bank•Grand Junction, CO

1d•Hybrid

About The Position

The Governance, Risk, and Compliance (GRC) Analyst performs day to day management of information technology risk and regulations, including Business Continuity Management and Vendor Management. Develops an understanding of Alpine Bank’s Information Security policies, procedures, and Information Security risk assessments. Assists with processes for relevant IT audits (e.g. FDIC, HIPAA, etc.). Works closely with internal and external IT contacts to plan, conduct, and review the results of security audits on new and existing systems. Maintains Alpine Bank’s policies, procedures, and risk assessments. Manages day to day of the Business Continuity Management programs: Crisis Management Program, Crisis Communication Plan, Incident Response Program, Disaster Recovery Program, Business Continuity Program. Documents all events and incidents. Evaluates business continuity risks. Collaborates to continuously improve the existing international guidelines and regulations. Supports the execution of Vendor Management activities across the organization. Works closely with training and location staff security awareness training. Works closely with Data Owners, Data Custodians, and users to monitor and address business continuity risk. Works closely with other Information Security staff, the IT department, multiple outside departments, Alpine Bank employee’s and software vendors. Regular and reliable on-site attendance is required as an essential function of this position. Perform other duties as assigned. Employees are held accountable for all duties of this job.

Requirements

Able to make decisions without constant supervision.
Good critical thinking skills.
Detail oriented, able to prioritize tasks effectively, and able to multi-task.
Strong oral and written communication skills.
Strong teamwork ethics.
Willing to be active in department and bank functions and willing to help with projects.
Exhibits a positive attitude.
Able and willing to work outside of normal schedule during upgrades or system outages.
High School Diploma, or General Education Diploma (GED) equivalent, required.
Possession of, or ability to obtain, a valid State of Colorado Driver’s License required.

Nice To Haves

Bachelor’s degree in related field is preferred.
Prior experience with Internal Audit, Internal Controls, Risk Management, Compliance, Policy Management, Project Management, or Third-Party Risk Management is preferred, but not required.
Banking experience preferred but not required.
The successful candidate will need to obtain the following training within 12 months of hire: Certificate of the Business Continuity Institute (CBCI), CompTIA Tech+ certification or higher.

Responsibilities

Develops an understanding of Alpine Bank’s Information Security policies, procedures, and Information Security risk assessments.
Assists with processes for relevant IT audits (e.g. FDIC, HIPAA, etc.).
Works closely with internal and external IT contacts to plan, conduct, and review the results of security audits on new and existing systems.
Maintains Alpine Bank’s policies, procedures, and risk assessments.
Manages day to day of the Business Continuity Management programs: Crisis Management Program, Crisis Communication Plan, Incident Response Program, Disaster Recovery Program, Business Continuity Program.
Documents all events and incidents.
Evaluates business continuity risks.
Collaborates to continuously improve the existing international guidelines and regulations.
Supports the execution of Vendor Management activities across the organization.
Works closely with training and location staff security awareness training.
Works closely with Data Owners, Data Custodians, and users to monitor and address business continuity risk.
Works closely with other Information Security staff, the IT department, multiple outside departments, Alpine Bank employee’s and software vendors.
Perform other duties as assigned.