Senior Information Security Risk & Compliance Analyst

UMB Bank; Kansas City (MO); Hybrid; USD 100,000 - 120,000; Full time

Benefits offered by this job

401(k) matching

Paid Time Off

Comprehensive benefits package

Job summary

UMB Bank in Kansas City, MO is seeking a Sr. Information Security Risk Analyst to support the Information Security Program, drive risk-based decisions, and collaborate with enterprise technology and security teams.

The role emphasizes PCI-DSS compliance, risk assessment, and regulatory awareness, with a hybrid on-site/remote work arrangement. Qualifications include a MIS/CS degree or equivalent, 5+ years in information security risk management, and familiarity with COSO, COBIT, ISO, NIST, and

Qualifications

• Bachelor’s degree in MIS, CS or related discipline or equivalent work experience.
• At least 5 years of information security, security audit, or risk management experience.
• Working knowledge of PCI-DSS and how organizations meet requirements.
• Familiarity with COSO, COBIT, ISO, NIST, ITIL frameworks.

Responsibilities

• Collaborate across teams to drive security initiatives.
• Advise business units on information security risk and treatment options.
• Collect performance metrics and provide actionable leadership recommendations.
• Support PCI-DSS compliance activities with internal teams.
• Maintain current knowledge of information security regulations and trends.
• Assist in responding to audits and third-party assessments.
• Ensure understanding and application of UMB Information Security Policies.

Skills

Information security risk management

Security auditing

Threat & risk assessment

Education

Bachelor’s degree in MIS/CS or related discipline

Tools

PCI-DSS framework

COSO

COBIT

ISO

NIST

ITIL

Job description

UMB Bank in Kansas City, MO is seeking a Sr. Information Security Risk Analyst to support the Information Security Program, drive risk-based decisions, and collaborate with enterprise technology and security teams.

The role emphasizes PCI-DSS compliance, risk assessment, and regulatory awareness, with a hybrid on-site/remote work arrangement. Qualifications include a MIS/CS degree or equivalent, 5+ years in information security risk management, and familiarity with COSO, COBIT, ISO, NIST, and