What are the responsibilities and job description for the Sr Information Risk Analyst position at FBL Financial Group, Inc.?
Research and stay abreast of current regulatory requirements such as Sarbanes Oxley (SOX), Model Audit Rule (MAR), Health Insurance Portability and Accountability Act Security Rule (HIPAA), Payment Card Industry Data Security Standards (PCI-DSS), Securities and Exchange Commission (SEC), and state security and breach notification laws, frameworks such as National Institute of Standards and Technology Cybersecurity Framework (NIST CSF), and best practices related to information security.
Execute information security controls and control tests, as assigned.
Partner with developers, engineers, architects and IT managers to understand various application and infrastructure technologies and risks.
Execute entitlement reviews in compliance with regulatory requirements
Maintain knowledge of FBL technologies to understand implications of security regulation or policy requirements.
Facilitate, track, and report status of security risk management activities.
Collaborate on the design of information technology controls and control tests.
Mentor Information Risk Associate and Information Risk Analyst staff members.
Recommend scoping of security risk assessments.
Execute assigned risk assessments and participate in projects/efforts to mitigate or remediate identified risks.
Maintain awareness of FBL’s information security policies and standards, act as a subject matter expert in response to compliance information requests.
Consult on Incident Response investigations.
Evaluate and respond appropriately to internal and external information technology audit requests.
Provide input to the development and/or review of security awareness training and communication.
Provide input to Enterprise Information Protection (EIP) policies, standards, processes, and procedures.
College degree (Business, Finance or Information Protection preferred) or equivalent plus five plus years of relevant experience required.
Certified Information Systems Auditor (CISA), Certification in Risk Management Assurance (CRMA) and/or Certified in Risk and Information Systems Control (CRISC) preferred.
Must have good research, analytical, organizational and decision-making skills, along with the ability to work in a team environment.
Oral and written communication skills as appropriate to this position.
Ability to read, write and speak the English language.
Reasonably regular and predictable attendance.
Ability to work in-person from our office in West Des Moines, IA.
