ECCO Select is a talent acquisition and consulting company specializing in people, process and technology solutions. We provide the talent behind the technology enabling our clients to achieve their goals. For more information about ECCO Select, visit us at www.eccoselect.com.

Position Title:     Sr. Information Security Risk Analyst

Location Information  

Hybrid – Downtown Kansas City, MO (Mon-Thu on-site, Fri remote)

Position Responsibilities:

As a Sr. Information Security Risk Analyst, you will play a key role in supporting the organization’s Information Security Program and its ability to address rapidly changing security threats, technologies, and evolving business needs. This position works closely with enterprise technology and information security teams, as well as business units across the organization, to promote and ensure strong data protection initiatives. Your core responsibilities will include:

• Collaborating across diverse teams and business units to drive key security initiatives forward.
• Enabling the business and stakeholders to make informed, risk-aware decisions by advising on information security risks and proposing feasible and acceptable risk treatment options.
• Supporting the collection and analysis of security performance indicators, metrics, and other evidence as part of information security program efforts, and communicating actionable recommendations to leadership.
• Contributing to the organization’s PCI-DSS compliance and assessment activities while supporting internal technology and business teams throughout the organization.
• Maintaining up-to-date knowledge of information security best practices, evolving threats, technology regulations, and industry trends, and applying this expertise to daily operations and decision-making.
• Assisting in responses to internal and external audits, including third-party security assessments where appropriate.
• Managing multiple, simultaneous workstreams for different stakeholders, communicating issues, risks, and statuses with clarity and timeliness.
• Ensuring practical application and understanding of information security policies and standards across business and technology teams.

Essential Skills, Experience

Candidates for this position should demonstrate the following skills, experience, and expertise:

• Bachelor’s degree in Management Information Systems, Computer Science, or a related field, or an equivalent combination of education and experience.
• A minimum of 5 years of progressively responsible experience in information security, security audit, or information security risk management/compliance.
• Strong working knowledge and hands-on experience with PCI-DSS compliance frameworks and associated organizational requirements.
• In-depth understanding of risk and controls, with practical experience applying relevant security standards and frameworks such as COSO, COBIT, ISO, NIST, and ITIL.
• Experience conducting information security risk assessments and facilitating or responding to information security audits.
• Adaptability and ability to manage multiple parallel tasks in a dynamic environment, while clearly communicating status, concerns, and solutions.
• Proactive approach to ongoing professional development in information security concepts, industry trends, and regulatory changes.

Qualifications:

• Professional certifications such as CISSP, CRISC, SEC+, PCI-DSS ISA/PCIP or similar accreditation are highly desirable.
• Demonstrated understanding of information security regulatory requirements and industry best practices.
• General familiarity with banking and financial services processes and knowledge of related data protection and risk management considerations is a plus.

ECCO Select is committed to hiring and retaining a diverse workforce. Our policy is to provide equal opportunity to all people without regard to race, color, religion, national origin, ancestry, marital status, veteran status, age, disability, pregnancy, genetic information, citizenship status, sex, sexual orientation, gender identity or any other legally protected category. Veterans of our United States Uniformed Services are specifically encouraged to apply for ECCO Select opportunities.

Equal Employment Opportunity is The Law
This Organization Participates in E-Verify