Cybersecurity Risk Analyst II

First Hawaiian Bank is seeking a Cybersecurity Risk Analyst II to join our IT Governance & Compliance Department.

Work Schedule

Monday-Friday 8:00AM to 5:00PM (hours may vary)

Compensation

The salary range for this role is $66,000 to $82,500/yr; commensurate with experience.

The successful candidate will be hired for the level of the position that aligns with their experience.

Responsibilities

This role is responsible for building and strengthening relationships across the Bank with technical leads and business partners, to understand technology stacks, designs, and review processes in support of the Bank’s cyber risk management practices. The role will assist management in the development, implementation, and execution of a measurements-based cyber risk management program. The primary responsibility will be to review and assesses new and existing vendor engagements and collaborate with technical leads and business partners to ensure comprehensive vendor portfolio management.

Qualifications

• Bachelor’s degree in computer science, management information systems (MIS), engineering, statistics or related field, or equivalent work experience required.
• Two (2) or more years of experience in information security required.
• Certified Information Systems Security Professional (CISSP), ISACA Certified in Risk and Information Systems Control (CRISC), or comparable security certification desired.
• Working knowledge of requirements for Federal Financial Institutions Examination Council (FFIEC) IT examination, Gramm-Leach-Bliley Act (GLBA) Information Security Standards and Sarbanes-Oxley Section 404 (“Management Assessment of Internal Controls”).
• Performs cybersecurity risk assessments and ongoing monitoring.
• Coordinates with managers and staff of IT, business units, and executive management.
• Interacts with consultants and vendors as required.
• Experience designing, implementing, and managing risk management processes and workflows.
• Cyber risk management experience
• Develop and implement security plans and projects
• Knowledgeable in risk quantification modeling and platforms (e.g., strong understanding of basic probability, calibrated estimations, monte carlo simulations, etc.)
• Able to plan, organize and budget
• Excellent written and verbal communication with demonstrable experience collaborating with technically oriented as well as business audiences
• Strong critical thinking and analytical skills
• Able to handle confidential matters judiciously
• Possesses attention to detail with excellent follow-through
• Able to work under pressure with multiple deadlines
• Excellent time management skills
• Demonstrated ability to work under pressure and manage multiple deadlines to completion in a timely manner with quality results
• Proficiency in Microsoft 365 suite of applications