InfoSec GRC Analyst - Risk, Compliance & Audits

Prosperity Bank; Lubbock (TX); On-site; USD 70,000 - 95,000; Full time

Job summary

Prosperity Bank is seeking an Information Security GRC Analyst to support governance, risk, and compliance programs in a regulated banking environment. The role involves risk assessments, policy administration, third-party risk, and security reporting.

You will collaborate with IT, risk, vendor management, internal audit, and business stakeholders to continuously improve controls and alignment with NIST CSF, FFIEC, CIS Controls, and related standards.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field.
• Professional certifications such as CISSP, CRISC, CGRC, CISA, Security+, or equivalent are preferred.
• Minimum of 2 years in information security, cybersecurity governance, risk management, compliance, IT auditing, or related field.
• Experience with information security governance, risk management, compliance, control assessment, audit, examination, or third-party cybersecurity risk management.
• Experience applying information security frameworks like NIST CSF, FFIEC, CIS Controls, ISO standards.
• Experience conducting risk assessments, control evaluations, remediation tracking, or governance activities.

Responsibilities

• Support day-to-day IS GRC program governance, risk, compliance, and reporting.
• Assist with administration of information security policies, standards, and control documentation.
• Conduct information security risk assessments and control evaluations for technology solutions and initiatives.
• Support the risk register, remediation efforts, and evidence gathering.
• Assist with audits, regulatory examinations, and third-party cybersecurity reviews.
• Analyze data to identify trends and opportunities for program improvement.
• Communicate risk findings and status to technical and non-technical stakeholders.
• Build relationships with IT, Risk, Vendor Management, Compliance, Legal, and business units.

Skills

Written communication

Verbal communication

Presentation skills

Analytical skills

Multitasking

Project management

Education

Cybersecurity degree or related field

CISSP/CRISC/CISA/Security+ pref

Tools

GRC platforms

Workflow automation tools

Data analysis tools

Job description

Prosperity Bank is seeking an Information Security GRC Analyst to support governance, risk, and compliance programs in a regulated banking environment. The role involves risk assessments, policy administration, third-party risk, and security reporting.

You will collaborate with IT, risk, vendor management, internal audit, and business stakeholders to continuously improve controls and alignment with NIST CSF, FFIEC, CIS Controls, and related standards.