Senior ISTRM & Information Security Strategist

Old National Bank; Evansville (IN); On-site; USD 78,000 - 153,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k) with company match

Employee Assistance Program

Job summary

Old National Bank seeks a Senior Information Security Analyst to drive and validate the ISTRM program, perform risk assessments, conduct control testing, and collaborate across IT, risk, and business units to strengthen security controls.

The role focuses on maintaining regulatory alignment, enhancing risk governance, and educating teams to foster a culture of information security throughout the enterprise.

Qualifications

• Bachelor's degree in CS or related field or equivalent experience.
• 5+ years information security or related field experience.
• 3+ years in information security and technology risk management.
• Familiarity with ISO27XXX, NIST, and industry best practices.
• Experience with policy, standards, and regulatory requirements.

Responsibilities

• Drive, maintain, and validate ISTRM policy compliance and standards.
• Conduct risk assessments and control testing; mitigate risk and close gaps.
• Support assurance activities for availability, integrity, and confidentiality of data.
• Lead training and awareness initiatives for information security and risk.
• Collaborate with internal/external stakeholders on ISTRM program improvements.
• Coordinate audits and third-party risk assessments.

Skills

Planning, Organization, Execution

Problem Solving/Decision Making

Communication

Technical Knowledge

Education

Bachelor's degree in Computer Science / related field

5+ years information security experience

3+ years in ISTRM / technology risk management

CISSP / CISA preferred

Job description

Old National Bank seeks a Senior Information Security Analyst to drive and validate the ISTRM program, perform risk assessments, conduct control testing, and collaborate across IT, risk, and business units to strengthen security controls.

The role focuses on maintaining regulatory alignment, enhancing risk governance, and educating teams to foster a culture of information security throughout the enterprise.