InfoSec GRC Analyst: Governance, Risk & Compliance

Prosperity Bank and Trust Co; Lubbock (TX); On-site; USD 90,000 - 130,000; Full time

Job summary

Prosperity Bank and Trust Co in Lubbock, TX seeks an Information Security GRC Analyst to support the bank's governance, risk, and compliance program, with potential work in Sugar Land or Lubbock. The role reports to the IS GRC Manager and collaborates across IT, compliance, legal, and vendor management.

The position emphasizes risk assessments, policy administration, regulatory compliance, and security reporting, aligning with applicable standards and frameworks.

Qualifications

• Requires Bachelor’s degree in Cybersecurity, IT, CS or related field.
• 2+ years in information security, GRC, compliance, or related area.
• Experience with security risk assessments, control evaluations, and third-party risk management.

Responsibilities

• Support day-to-day IS GRC program execution across governance, risk, and compliance activities.
• Assist with policy, standards, and control documentation maintenance.
• Conduct information security risk assessments and document results.
• Support risk register, remediation tracking, and management reporting.
• Assist with third-party cybersecurity risk management activities and due diligence.
• Support audits and regulatory examinations with evidence gathering and documentation.

Skills

Information security governance

Risk management

Regulatory compliance

Policy administration

Education

Bachelors in Cybersecurity/IT or related

CISSP/CRISC/GRC certifications preferred

Tools

GRC platforms

NIST CSF/FFIEC/CIS controls

Job description

Prosperity Bank and Trust Co in Lubbock, TX seeks an Information Security GRC Analyst to support the bank's governance, risk, and compliance program, with potential work in Sugar Land or Lubbock. The role reports to the IS GRC Manager and collaborates across IT, compliance, legal, and vendor management.

The position emphasizes risk assessments, policy administration, regulatory compliance, and security reporting, aligning with applicable standards and frameworks.