Cybersecurity Analyst

Zions Bancorporation; Midvale (UT); On-site; USD 70,000 - 100,000; Full time

Benefits offered by this job

Medical, Dental and Vision Insurance

Paid Parental Leave

401(k) plan with company match

Tuition Reimbursement

Life and Disability Insurance

11 Paid Federal Holidays

Employee wellness benefits

Job summary

Zions Bancorporation is seeking a Cybersecurity Analyst to support the GLBA 501(b) Safeguards Program within the EIS GRC team. This role coordinates risk assessments, prepares the annual report for the Board, and drives evidence collection and remediation across GLBA domains.

You will collaborate with cybersecurity, business, and technology teams to maintain an effective information security program. The role emphasizes cross-functional collaboration, documentation accuracy, and timely updates

Qualifications

• Familiarity with Gramm‑Leach‑Bliley Act and financial services security requirements.
• Knowledge of cybersecurity frameworks and regulatory guidance (NIST CSF, FFIEC IT Booklets).
• Experience with risk management and GRC processes across large organizations.

Responsibilities

• Coordinate the GLBA program risk assessment and annual Board report.
• Lead GLBA stakeholder coordination for reporting and control execution.
• Prepare materials for program updates, dashboards, and reviews for senior leaders.
• Track remediation items with owners, due dates, dependencies, and risk impact.
• Collect, organize, and validate control evidence; maintain audit-ready repositories.
• Update risk register with new risks and mitigation notes; map to domains.
• Prioritize alerts to stay ahead of evolving regulatory requirements.
• Perform other duties as assigned.

Skills

GRC knowledge

Risk assessment

Regulatory compliance

Stakeholder communication

Cybersecurity concepts

Education

Bachelor’s degree in cybersecurity or related field

Tools

GRC platforms

NIST CSF

NIST SP 800-53

FFIEC IT Booklets

Job description

Zions Bancorporation’s Cybersecurity team is transforming what it means to work for a financial institution. With a commitment to protecting our bank and providing our community, clients, and colleagues the best experience possible for over 150 years. Help us transform our workforce of the future, today.
We are seeking a Cybersecurity Analyst to join Zions Bancorporation’s Enterprise Information Security (EIS) Governance, Risk and Compliance (GRC) team. The Cybersecurity Analyst will support the day‑to‑day coordination of the Bank’s GLBA 501(b) Safeguard Program by organizing reporting, performing workflows, tracking remediation activities, and facilitating communication among key stakeholders across the enterprise. The GLBA analyst ensures program tasks progress on schedule, documentation remains current, and stakeholders receive the information and support needed to meet GLBA requirements.
The Cybersecurity Analyst will play a key role in identifying and communicating risk through involvement in the annual risk assessment, and the creation of the annual report that is provided to the Board of Directors. They design and enhance processes that operationalize key elements of the information security program. By working with other teams across Zions to ensure that identified risks are mitigated, you will also gain key insights into today’s evolving and complex risk and regulatory landscape. The Cybersecurity Analyst also collaborates with internal cybersecurity teams, business stakeholders, and technology teams to support the development and execution of a comprehensive information security program.
The Cybersecurity Analyst will:

• Coordinate the program risk assessment, and creation of a GLBA annual report that is provided to the Board of Directors.
• Coordinate and maintain key GLBA stakeholders to gather information needed for program reporting activities and control execution.
• Support senior cybersecurity leaders by preparing draft materials for program updates, dashboards, and operational reviews.
• Track formal improvement areas and remediation items across all GLBA domains, ensuring owners provide updates and evidence. Maintain structured remediation logs with statuses, due dates, dependencies, and risk impact and escalate overdue or stalled remediation items to senior GRC leadership
• Collect, organize, and validate control evidence across Program control owners, ensure evidence meets quality standards (accuracy, completeness, timeliness), and Maintain audit‑ready evidence repositories and version‑controlled documentation
• Update the risk register with new risks, mitigation notes, and status changes. Ensure risks are correctly mapped to domains and remediation items and coordinate with control owners to validate progress and document updates
• Review and prioritize alerts from the compliance platform to drive visibility and awareness into the evolving regulatory landscape to understand new or changing security requirements.
• Other duties as assigned.

Requirements:

• Familiarity and understanding of key laws and regulations that influence information security practices and trigger security requirements within the financial services sector, including the Gramm‑Leach‑Bliley Act.
• Familiarity with cybersecurity frameworks and other relevant authoritative resources, including the National Institute of Standards and Technology Cybersecurity Framework (NIST CSF), NIST 800-53, and the Federal Financial Examination Council (FFIEC) IT Booklets, such as the Information Security Booklet.
• Proficiency in information security domains, including policies and standards, cyber risk management, regulatory compliance, Identity Access Management and others. Experience with GRC platforms preferred.
• Ability to lead cross‑functional, multi‑disciplinary projects and collaborate with high‑performing teams and individuals across the organization to accomplish common goals.
• Bachelor’s degree in a related field (cybersecurity, information technology, information systems) or equivalent experience in cybersecurity, information technology, or other directly related technical experience.

Location:
This position is fully in office (5 days a week) at the Zions Technology Center - 7860 South Bingham Junction Blvd, Midvale, UT 84047
The Zions Technology Center is a 400,000-square-foot technology campus in Midvale, Utah. Located on the former Sharon Steel Mill superfund site, the sustainably built campus is the company’s primary technology and operations center. This modern and environmentally friendly technology center enables Zions to compete for the best technology talent in the state while providing team members with an exceptional work environment with features such as:

• Electric vehicle charging stations and close proximity to Historic Gardner Village UTA TRAX station.
• At least 75% of the building is powered by on‑site renewable solar energy.
• Access to outdoor recreation, parks, trails, shareable bikes and locker rooms.
• Large modern cafe with a healthy and diverse menu.
• Healthy indoor environment with ample natural light and fresh air.
• LEED-certified sustainable building that features include the use of low VOC‑emitting construction materials.

Benefits:

• Medical, Dental and Vision Insurance - START DAY ONE!
• Life and Disability Insurance, Paid Parental Leave and Adoption Assistance
• Health Savings (HSA), Flexible Spending (FSA) and dependent care accounts
• Paid Training, Paid Time Off (PTO) and 11 Paid Federal Holidays
• 401(k) plan with company match, Profit Sharing, competitive compensation in line with work experience
• Mental health benefits including coaching and therapy sessions
• Tuition Reimbursement for qualifying employees
• Employee Ambassador preferred banking products