Information Security Analyst

## Overview *BankNewport **celebrates** being a community bank since 1819. Yes, that’s 200+ years, and still growing. Offering new and exciting career opportunities, BankNewport is **committed** to providing our employees the resource and guidance to develop careers that are challenging and rewarding.* *So if you’re looking for a great professional opportunity, know that BankNewport will **empower** and **invest** in you.* The Information Security Analyst supports the Bank’s information security risk management and compliance program, with a focus on vendor risk, technology risk, third-party due diligence, access reviews, contract support, control monitoring, and audit-ready documentation. This role helps ensure vendors, technologies, systems, and business processes are assessed, documented, monitored, reported, and assigned to accountable owners in accordance with Bank policies, regulatory expectations, and program requirements. The Analyst works with Information Security, Technology, Risk Management, Legal, Procurement, business owners, system administrators, and other partners to support a consistent, well-documented risk management model focused on ownership, follow-up, issue tracking, remediation, and continuous improvement. The ideal candidate is detail-oriented, organized, collaborative, and able to evaluate risks in a practical manner. ## Responsibilities ***PRIMARY ACCOUNTABILITIES / RESPONSIBILITIES*** - All employees of BankNewport are expected to support Bankwide efforts designed to understand, measure, monitor, reduce, control and report risk in the most efficient and cost-effective manner. Risk management includes but is not limited to compliance risk, credit risk, liquidity risk, market risk, operations risk and systems risk as well as attention to physical building safety and security. Furthermore, all support staff employees are expected to fully support the Bank’s “Set your Sales” initiative and utilize support staff training to consistently provide sales support to all departments. They should also possess an understanding of their department’s support metrics and continue to improve Bank efficiencies. - The Information Security Analyst performs any functions necessary, within scope of authority and expertise, to provide the highest level of service and responsiveness to colleagues and customers and the communities in which the Bank serves. The Information Security Analyst also assists others in the Department, as needed. - Information/Cyber Security Program – Assists the Information Security Officer as needed in managing the Bank’s Information Security program. Works independently to ensure effective management of the overall program and system, including developing and providing reporting, ensuring data quality and assisting with audit responses as required. - Vendor Management Program – Responsible to manage the Bank’s Vendor Management program and system application, under the direct guidance of the Information Security Officer. Works independently to ensure effective management of the overall program and system, including developing and providing reporting, ensuring data quality and consistency, and working directly with business units to assist in their vendor management responsibilities and use of the vendor management system. Identify opportunities for enhancement and improvements to the process and related guidance. Maintain related policies, procedures and guidance and ensure they remain current with regulatory and best practices expectations. - Project Management Life Cycle – Responsible to assist the Information Security Officer in the development, implementation and management of the Bank’s Project Management Life Cycle and Business Initiative Due Diligence process - Business Continuity Planning – Support the Information Security Officer in the management of the Bank’s Business Continuity Planning (BCP). Responsibilities may include working with business units to review and update their individ…