Cybersecurity Analyst - Governance Risk Compliance (GRC)

Zions Bancorporation; Midvale (UT); Hybrid; USD 85,000 - 125,000; Full time

Benefits offered by this job

Medical, Dental & Vision: Start Day 1

401(k) with company match

Paid Time Off (PTO)

Tuition Reimbursement

Hybrid work from home with 3 days in-fi

Job summary

Zions Bancorporation is seeking a Cybersecurity Analyst focused on Governance Risk & Compliance (GRC) to elevate the enterprise security awareness culture.

You will design engaging training, run threat simulations, and promote proactive security behaviors across the organization, partnering with Information Security, Risk Management, HR, and IT teams.

Qualifications

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, Communications, Human Resources, Instructional Design (other degrees will be considered), or a related field; or equivalent practical experience.
• 2–4 years of experience in information security, training development, corporate communications, or instructional design (preferably within an IT or cybersecurity context).
• Experience designing security awareness materials and delivering engaging training.

Responsibilities

• Design, coordinate, and execute security awareness training for diverse audiences.
• Tailor training for Information Security teams, developers, system administrators, people leaders, and executives.
• Simplify complex security topics with visuals and adult-learning principles.
• Develop and deliver just-in-time learning content and simulations.

Skills

Project Management

Creativity

Analytical Mindset

Collaboration

Risk Management

Security Principles

Instructional Design

Communication

Education

Bachelor’s degree or equivalent practical experience

Job description

Cybersecurity Analyst - Governance Risk Compliance (GRC)

Zions Bancorporation is transforming what it means to work for a financial institution. With a commitment to technology and innovation, we have been providing our community, clients, and colleagues with the best experience possible for over 150 years. Help us transform our workforce of the future, today.

We are currently looking for a Cybersecurity Analyst - Governance Risk Compliance (GRC) to join Zions Bancorporation’s Enterprise Information Security team to drive our enterprise-wide Cybersecurity Awareness culture. You will reduce human risk by designing engaging security education, managing threat simulations, and championing proactive security behaviors across the organization.

Responsibilities

Training & Education

• Design, coordinate, and execute security awareness training that is both precise and entertaining while effectively reducing behavior risk.
• Curate and tailor security training for specific audiences, such as our Information Security teams, developers, system administrators, people leaders, and executive leadership.
• Understand adult learning theory with ability to simplify complex subjects into easy-to-understand material with a focus on visual aids.
• Maintain relevant cybersecurity knowledge and collaborate with cyber threat intel and incident response partners for understanding and inclusion of real and emerging threats as part of delivering relevant simulation exercises.
• Analyze simulation results to identify high-risk user groups and individuals.
• Recommend and develop "just-in-time" learning content

Culture & Communication Campaigns

• Maintain existing Cybersecurity Awareness intranet site and use it to distribute cybersecurity communications, articles, and curated content explaining security best practices in simple, non-technical language.
• Act as a security advocate, fostering a supportive, "no-blame" reporting culture where employees feel comfortable reporting security concerns.
• Act as a voice for the Cybersecurity team, reviewing and editing departmental and company communications.
• Facilitate and participate in Cybersecurity Ambassadors with representatives across the organization, creating a bridge between business units and cybersecurity.

Metrics, Analytics, and Reporting

• Recommend and understand Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) to measure the effectiveness of the training and awareness program beyond training completion metrics.
• Use behavioral data to continuously refine and adapt the training strategy.
• Other duties as assigned.

Qualifications

Education & Experience

• Education: Bachelor’s degree in computer science, Information Technology, Cybersecurity, Communications, Human Resources, Instructional Design (other degrees will be considered), or a related field; or equivalent practical experience.
• Experience: 2–4 years of experience in information security, training development, corporate communications, or instructional design (preferably within an IT or cybersecurity context).

Skills & Knowledge

• Project Management: Strong organizational skills with the ability to manage multiple campaigns and projects simultaneously.
• Creativity & Innovation: Always looking for fun, memorable, and novel ways to keep security top-of-mind.
• Analytical Mindset: Uses data and metrics to guide decisions and improve training efforts over time.
• Collaboration: Able to build strong relationships across Information Security teams, Risk Management, HR, Corporate Communications, and IT.
• Risk Management: Basic understanding of risk management disciplines.
• Security Principles: Basic understanding of core cybersecurity concepts, threats (phishing, social engineering, malware), and standard security controls.
• Instructional Design & Content Creation: Knowledge of adult learning theory and experience creating engaging digital content.
• Communication: Exceptional written and verbal communication skills. Ability to translate complex, highly technical concepts into engaging, easy-to-understand language for a non-technical audience.

Plus

• Certifications such as, but not limited to: Security Awareness Practitioner (CSAP) or SANS Security Awareness Professional (SSAP) or CompTIA Security+ Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) or ISC2 CC
• Understanding of banking industry including laws and regulations

Location

This position has a hybrid work from home schedule with a minimum of three days per week in the office at the new Zions Technology Center in Midvale, UT.

The Zions Technology Center is a 400,000-square-foot technology campus in Midvale, Utah. Located on the former Sharon Steel Mill superfund site, the sustainably built campus is the company’s primary technology and operations center. This modern and environmentally friendly technology center enables Zions to compete for the best technology talent in the state while providing team members with an exceptional work environment with features such as:

• Electric vehicle charging stations and close proximity to Historic Gardner Village UTA TRAX station.
• At least 75% of the building is powered by on-site renewable solar energy.
• Access to outdoor recreation, parks, trails, shareable bikes and locker rooms.
• Large modern cafe with a healthy and diverse menu.
• Healthy indoor environment with ample natural light and fresh air.
• LEED-certified sustainable building that features include the use of low VOC-emitting construction materials.
• Medical, Dental and Vision Insurance - START DAY ONE!
• Life and Disability Insurance, Paid Parental Leave and Adoption Assistance
• Health Savings (HSA), Flexible Spending (FSA) and dependent care accounts
• Paid Training, Paid Time Off (PTO) and 11 Paid Federal Holidays
• 401(k) plan with company match, Profit Sharing, competitive compensation in line with work experience
• Mental health benefits including coaching and therapy sessions
• Tuition Reimbursement for qualifying employees
• Employee Ambassador preferred banking products

This Cybersecurity Analyst position is currently NOT eligible for employment visa sponsorship (e.g., H-1B visa). This includes, for example, situations where a candidate may have temporary work authorization while enrolled in school or upon graduation (e.g., CPT, OPT) but would need H-1B visa sponsorship within a few years of employment in order to maintain employment eligibility.

This position will be open until filled.

All candidates, including those with criminal histories will be considered for employment. However, a background check adjudicated consistently with the FDIC Section 19 regulation will be completed on any candidate who accepts a conditional job offer from the Company. Because the Company is a financial institution, the FDIC guidelines apply to all positions within the company and as such any and all job duties have a direct relationship to a candidate’s criminal history and that criminal history would need to align with the FDIC Section 19 regulations.

Zions Bancorporation, National Association prohibits illegal discrimination and reaffirms its policy of providing Equal Employment Opportunity (EEO), by extending equal employment and advancement opportunities to all employees and applicants for employment, without regard to race, color, religion, age (40 and over), sex, pregnancy, gender, disability, national origin, ethnic background, citizenship, protected veteran status, military service, sexual orientation, gender identity, genetic information or any other characteristic protected by applicable federal, state or local law.

It is the Company’s policy not to discriminate because of a person’s relationship or association with a protected veteran. This includes spouses and other family members. Also, Zions will safeguard the fair and equitable treatment of protected veteran spouses and family members with regard to all employment actions and prohibit harassment of applicants and employees because of their relationship or association with a protected veteran.

Applicants Requesting Accommodations: If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to use or access our career site. You can request reasonable accommodations by contacting us at [e-mail] or 801/844-7618. Please email your resume/cover letter, indicate what position you are interested in and include "Accommodation needed" in the subject line to ensure your information is routed to the appropriate contact.