Onsite GRC Analyst - Risk & Security Compliance

Mechanics Bank; California; On-site; USD 34,440 - 50,971; Full time

Job summary

Mechanics Bank in Irvine, California seeks a GRC Analyst to join our on-site team. You will support information security risk assessments, risk-based scheduling, and governance of GLBA, after-hours inspections, and security and privacy incidents.

You will collaborate with multiple departments to ensure policy compliance, lead risk assessments, monitor corrective actions, and stay up-to-date on laws and threats. Strong written and oral communication with senior management is essential.

Qualifications

• Bachelor's degree in a related field or equivalent education and experience.
• Minimum of 1 year experience as a Security/SOC analyst or comparable role in security administration.
• Strong technical skills with Microsoft Office (Word and Excel) and other industry standard software.
• Threat analysis / Incident Response experience: interpreting events and escalation.
• Knowledge of systems applications used by banks.
• Awareness of latest and common security threats.
• Excellent ability to diagnose and troubleshoot risk assessment issues and think outside the box.
• Excellent verbal and written communication skills; able to present to senior management.
• Successful and timely completion of assigned compliance training is required.

Responsibilities

• Works with other departments to ensure compliance of company policies.
• Assists the Information Security GRC team when required with all GRC related projects.
• Takes a lead role in conducting risk assessments and security research on threats and control remediation. Makes recommendations and oversees implementation.
• Tier 1 for all security, privacy, and phishing incidents and recommended remediation. Tier 1 for after‑hour inspections.
• Supports the Bank's operational information security responsibilities, including the development and maintenance of standards, procedures, and guidelines necessary to satisfy the Information Security department's risk assessment and control requirements.
• Proactively monitors and investigates corrective action items from risk assessments to ensure completion and closure.
• Keeps informed on new laws, threats and regulations that affect information security.
• Works in a customer service setting. Effectively communicates with all employees and upper management of all levels.

Skills

Threat analysis

Incident Response

Communication skills

Risk assessment

Problem solving

Education

Bachelor's degree in a related field

Tools

Microsoft Office

Job description

GRC Analyst (onsite) job at Mechanics Bank. San Joaquin, CA. GRC Analyst (onsite) Location Irvine, CA (San Joaquin Marsh area) : Mechanics Bank is currently searching for a GRC Analyst to join our team in Irvine, California. Here at Mechanics Bank, we value connection, partnership, long term relationships and working together in person. This role will be working on-site at our Irvine or Walnut Creek locations. Under direct supervision, provides direction to the Information Security GRC team in support of the facilitation and completion of all information security risk assessments, risk-based risk assessment schedules, information security policies and procedures, information security awareness training; and the governance of the following programs: GLBA, After Hours Inspection, and Security and Privacy Incident. Responsible for being the eyes and ears and first level escalation for all information security issues pertaining to risk assessments, after hours inspections, security and privacy incidents, phishing campaigns and training. In addition, responsible for assisting in maintaining, enhancing and automating risk assessments and corrective action items. What you will do:

• Works with other departments to ensure compliance of company policies.
• Assist Information Security GRC team when required with all GRC related projects.
• Takes a lead role in conducting risk assessments and security research on threats and control remediation. Makes recommendations and oversees implementation. Able to fine tune and streamline all risk assessment processes.
• Tier 1 for all security, privacy, and phishing incidents and recommended remediation. Tier 1 for after- hour inspections.
• Supports the Bank's operational information security responsibilities, including the development and maintenance of standards, procedures, and guidelines necessary to satisfy the Information Security department's risk assessment and control requirements.
• Proactively monitors and investigates corrective action items from risk assessments to ensure completion and closure.
• Keeps informed on new laws, threats and regulations that effect information security.
• Works in a customer service setting. Effectively communicates with all employees and upper management of all levels.
Who you are:
• Bachelor's Degree in a related field, or equivalent education and experience, is required.
• Minimum of 1 year experience as a Security/SOC analyst or comparable role in security administration required.
• Strong technical skills with Microsoft Office, including Word and Excel and other industry standard software and applications.
• Threat analysis / Incident Response experience: interpreting events and escalation
• Knowledge of systems applications used by banks.
• Awareness of latest and common security threats.
• Excellent ability to diagnose and troubleshoot risk assessment issues and think outside the box.
• Excellent verbal and written communication skills, able to present to senior management.
• Successful and timely completion of assigned compliance training is required.
#LI-ML1 Pay Range: $25.00 - $37.00 an hour Final compensation package will be determined by the work experience, education, and/or skill level of the applicant along with internal equity and alignment with geographic market data.
• Mechanics Bank is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, religion, national origin, age, genetic information, veteran status, or on the basis of disability, gender identity, sexual orientation or other bases prohibited by applicable law.
• Please view Equal Employment Opportunity Posters provided by OFCCP here .
• To learn more about Mechanics Bank's California privacy and security policies, including your right to a Notice At Collection as a California Resident, please visit