Enterprise Information Security & Technology Risk Analyst

First Hawaiian Inc.; Honolulu (HI); On-site; USD 85,000 - 115,000; Full time

Job summary

First Hawaiian Bank is seeking an Enterprise Information Security & Technology Risk Analyst to join the Enterprise Information Security & Technology Risk Department. The role provides independent oversight of technology risk, assessing governance, controls, and remediation strategies across cybersecurity, IT risk, data risk, and third-party risk.

The position reports to the EISTR Manager and supports strategic risk guidance, executive reporting, and proactive risk management to align with

Qualifications

• Bachelor's degree in computer science, information security, or related field; or equivalent experience.
• 2+ years of progressive experience in IT operations, compliance, information security, or risk management.
• 3+ years of progressive experience in technology risk management, information security, or regulatory compliance.

Responsibilities

• Provide independent oversight of enterprise technology risk and information security programs.
• Evaluate effectiveness of risk management practices, control environments, and remediation strategies.
• Advise senior leadership with effective challenge and risk guidance.
• Help strengthen governance and risk posture across cybersecurity, IT risk, data risk, third-party risk, and business continuity.
• Foster a proactive, risk-aware culture across the enterprise.

Skills

Risk management

Strategic thinking

Cross-functional collaboration

Regulatory compliance

Executive reporting

Decision making under pressure

Microsoft 365

Education

Bachelor's degree in computer science or information security

Master's degree preferred

Tools

Enterprise risk management tools

Job description

Job Description

First Hawaiian Bank is currently seeking an Enterprise Information Security & Technology Risk Analyst to join the team in the Enterprise Information Security & Technology Risk Department.

Job Description

First Hawaiian Bank is currently seeking an Enterprise Information Security & Technology Risk Analyst to join the team in the Enterprise Information Security & Technology Risk Department.

Compensation

The pay range for the role is $85,000 - 115,000/yr; commensurate with experience

The level of the position will be determined by the hiring manager based on the candidate's qualifications.

Work Schedule

Monday - Friday 8:00AM - 5:00PM (hours may vary)

Responsibilities

The Enterprise Information Security & Technology Risk Analyst serves as a key member of the Bank’s second line of defense, providing independent oversight of enterprise technology risk and information security programs. Reporting to the Enterprise Information Security & Technology Risk (EISTR) Manager, this role evaluates the effectiveness of technology risk management practices, control environments, and remediation strategies across cybersecurity, IT risk, data risk, third-party risk, and business continuity domains. Acting as a trusted advisor to senior leadership, the Analyst provides effective challenge, strategic risk guidance, and independent assessment to ensure the Bank’s technology risk posture aligns with enterprise risk appetite, regulatory expectations, and evolving threat landscapes. The role plays a critical part in strengthening organizational resilience, advancing risk governance, and fostering a proactive, risk‑aware culture across the enterprise.

Qualifications

The ideal candidate will have:

• Bachelor's degree in computer science, information security, related field required; or the equivalent combination of education an experience such as:
• 2+ years of progressive experience in IT Operations, Compliance, Anti-Money Laundering, Information Security, and/or Risk Management required
• 3+ years of progressive experience in:
• Technology risk management, information security, financial crimes program oversight, regulatory compliance, or operational risk inclusive of:
• Proven experience interacting with cross-functional teams, regulators, and senior executives
• Direct experience in financial services or other highly regulated industry
• Master's degree in information systems, cybersecurity, business administration, or related discipline preferred
• Professional risk designations such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CRISC (Certified in Risk Information Systems Control), CISA (Certified Information Systems Analyst) preferred
• Expertise in one or more of the following areas:
• Cybersecurity governance and threat management
• Enterprise Technology Risk Management frameworks
• Vendor/Third-party risk oversight
• Data risk, privacy, and governance
• Business continuity planning and operational resilience
• Enterprise-level strategic planning, financial management and budgeting expertise
• Risk analytics, measurement, and executive reporting capabilities, including development of KRIsand risk insights for senior leadership
• Ability to collaborate effectively across business units, building strong partnerships with Enterprise Technology, business leaders, and risk functions to drive risk-informed decision-making and remediation strategies
• Ability to make sound, timely decisions in high‑risk and high‑pressure environments
• High level of execution discipline, attention to detail, and accountability for outcomes
• Ability to manage multiple priorities and deadlines in a complex, regulated environment
• Proficiency in Microsoft 365 and enterprise risk management tools
• Demonstrated expertise in second line of defense (independent risk oversight), including:
• Effective challenge of first-line decisions
• Risk identification, escalation and reporting to executive leadership
• Advanced analytical, problem‑solving, and strategic decision‑making skills