Senior Information Security & Risk Analyst (Hybrid)

COUNTRY Financial; Bloomington (IL); Hybrid; USD 94,400 - 129,800; Full time

Benefits offered by this job

401(k) with company match

Hybrid work

Incentive plan

Insurance benefits

Job summary

COUNTRY Financial is seeking a security consultant to participate in risk-based security assessments, define policies, and support governance across projects. The role involves identifying vulnerabilities, performing penetration tests, and communicating technical findings in business terms.

This position emphasizes collaboration with cross-functional teams and vendors to strengthen controls. The candidate should bring 7+ years of information security experience, familiarity with NIST, ISO, CIS,

Qualifications

• Typically requires 7+ years of information security experience.
• Experience performing risk assessments and communicating mitigation to stakeholders.
• Familiarity with frameworks such as NIST CSF, 800-53, ISO 27001, CIS Controls, PCI DSS, GLBA, HIPAA.

Responsibilities

• Participates in projects and assessments on risk.
• Analyzes and defines security policies and standards.
• Monitors, alerts and responds to security events.
• Performs computer forensic and investigative activities; and penetration and vulnerability testing.
• Defines and administers identity & access roles and workflows.

Skills

Security governance

Risk assessment

Vendor due diligence

Security policies

Penetration testing

Communication

Regulatory frameworks

Executive reporting

Education

CISSP

CISM

CRISC

CISA

Tools

GRC platforms

Job description

COUNTRY Financial is seeking a security consultant to participate in risk-based security assessments, define policies, and support governance across projects. The role involves identifying vulnerabilities, performing penetration tests, and communicating technical findings in business terms.

This position emphasizes collaboration with cross-functional teams and vendors to strengthen controls. The candidate should bring 7+ years of information security experience, familiarity with NIST, ISO, CIS,