Data Risk Analyst at AgFirst Farm Credit Bank in Columbia, South Carolina

Job Description:

JOB DESCRIPTION



The Data Risk Analyst safeguards AgFirst's information and data assets. This position involves identifying, investigating, analyzing, and recommending security measures to ensure the confidentiality, integrity, and availability of data. The analyst will perform comprehensive risk assessments, plan controls, and safeguards, and ensure alignment of residual risk and risk appetite. The analyst also effectively communicates data risk issues and control gaps through governance processes.



What You'll Do:

• Fosters a culture of collaboration and responsible risk management by defining and adhering to appropriate risk appetites, control frameworks, policies, and directives.
• Contributes to enterprise risk management deliverables, performing comprehensive risk assessments and other assurance activities.
• Recommends and implements controls and safeguards to mitigate identified risks
• Monitors compliance risk according to applicable industry/AgFirst regulations, standards, policies, and directives; contributes to developing and conducting information security awareness training.
• Coordinates the creation, enhancement, and maintenance of data security-related documentation.
• Creates, collects, and maintains data security-related risk/compliance metrics.
• Identify and evaluate data risks, internal controls, and related opportunities for internal control enhancement.
• Guide on information and data security risks to various stakeholders and committees.

• Bachelor's degree in Information Assurance, Information Systems, Risk Management, Auditing, Computer Science or related field or the equivalent in education and work experience.
• Minimum of 4 years in the information technology/security field, with at least 2 years in data risk management and/or operational risk.
• Experience in developing and executing information risk assessments using industry-standard approaches, methodologies, and frameworks (e.g., NIST).
• Knowledge of strategy and technical roadmap planning, data quality, and standard business analysis techniques.
• Effective communication skills to articulate complex security issues to non-technical stakeholders.
• Ability to design and lead training and manage stakeholders in a high-paced environment.

• Preferred certifications include Security+, Certified in Cybersecurity, or equivalent.