Information Security Analyst

Steel Partners•Salt Lake City, UT

About The Position

The Information Security Analyst helps maintain WebBank’s information security governance program. This role supports control activities that protect information, Bank systems, and Strategic Partner programs by reviewing evidence, supporting risk assessments, validating access, tracking issues, documenting control activities, and helping to translate security requirements into measurable actions. Working under the direction of Information Security leadership, the analyst works with technology, business, vendor, and Strategic Partner stakeholders to help ensure security information is complete, exceptions are documented and escalated appropriately, and assigned action items are tracked to resolution. The role requires sound judgment, strong organizational skills, professional follow-up, and the ability to translate security expectations into clear, documented outcomes. This role is well suited for a curious information security, technology risk, audit, or IT professional with strong analytical judgment, attention to detail, clear communication skills, and an interest in strengthening security governance practices in a regulated banking environment.

Requirements

Minimum of 3 years of relevant experience in information security, information technology, technology risk, IT audit, compliance, third-party risk management, cybersecurity, or a related discipline.
A bachelor’s degree in Information Systems, Information Technology, Cybersecurity, Risk Management, or a related field.
Working knowledge of information security concepts such as privileged access, multi-factor authentication, vulnerability management, incident response concepts, security monitoring, and basic network or cloud security.
Ability to review information from multiple sources, identify inconsistencies or control gaps, ask good questions, evaluate risk implications, and document clear conclusions.
Strong written and verbal communication skills, including the ability to work professionally with technical, business, vendor, and control stakeholders.
Interest in learning how information security supports regulatory compliance, customer protection, third-party oversight, and enterprise risk management in a banking environment.
Strong organization, attention to detail, follow-through, and discretion when reviewing access, documenting issues, tracking remediation, and handling confidential information.

Nice To Haves

Familiarity with FFIEC, FDIC, GLBA, NIST, or other information security frameworks and regulatory expectations.
Familiarity with Diagramming
Experience in banking, financial services, fintech, embedded finance, third-party risk oversight, compliance, audit, or technology operations

Responsibilities

Support WebBank’s Information Security Governance program by maintaining control documentation and tracking assigned security activities against established requirements.
Assist with security risk assessments for Bank systems, business processes, vendors, and Strategic Partner programs by gathering information, evaluating control evidence, and documenting observations.
Perform user and privileged access reviews, validate access appropriateness, document exceptions, and coordinate remediation with system and business owners.
Track security issues and remediation plans related to security exceptions, audit and examination findings, risk assessment observations, and control gaps.
Prepare security reporting and support materials for management, audit, and regulatory examination activities, including metrics, dashboards, issue summaries, and requested documentation.
Support data protection, policy and procedure maintenance, incident response readiness, business continuity, and disaster recovery activities through documentation, exercise and testing support, and follow-up on assigned items.
Use approved security, GRC, reporting, collaboration, and AI-enabled productivity tools to organize evidence, support documentation, prepare reporting, communicate status, and improve workflow efficiency in accordance with Bank policies, confidentiality requirements, and human review expectations.