IT Risk Analyst, Level II

First Interstate

IT Risk Analyst II responsible for measuring and identifying technical risks within First Interstate Bank's infrastructure and solutions. Performing security assessments and providing guidance on IT security architecture and configurations.

Posted 6/18/2026full-timeIdaho, Iowa, Montana, New York, Oregon, South Dakota, Wyoming • 🇺🇸 United StatesMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

CloudCyber SecurityFirewalls

About the role

Key responsibilities & impact

Responsible for measuring and identifying technical risks within First Interstate Bank's (FIB) infrastructure and third-party solutions.
Perform testing to validate systems and application security configurations continue to meet industry and FIB architecture and security standards.
Establish and leverage risk metrics and dashboards to continuously assess and report on technical risk.
Provide guidance on IT security architecture and configurations based on the risks and controls evaluated.
Leverage technical knowledge to assist in developing and enhancing cyber and information security policies, procedures, and standards.
Work with Enterprise Architecture to assist in developing and enhancing the information security architecture standards and IT security technology roadmaps.
Research and evaluate proposed new technologies and platforms to ensure appropriate technical security controls are specified in the requirements and are in alignment with security reference architecture and security controls framework.
Provide security consulting on projects to ensure solutions are designed in accordance with security architecture and that security configurations are properly implemented.
Perform technical security assessments against FIB’s existing infrastructure and products to ensure compliance with security architecture, policies, standards, procedures, and industry best practices.
Monitor and mature the risk-based IT security metrics, scorecards, and dashboards to track cybersecurity performance and trends across the organization.
Assist the business in identifying root causes and develop mitigation for deficiencies.
Work with various groups during product upgrades or new product design to ensure security best practices are implemented.
Perform technical reviews of third-party cyber and information risk.
Research emerging technologies in support of security enhancement and development efforts.

Requirements

What you’ll need

Bachelor's Degree in a related field required
4-6 years experience in IT security audit, architecture, engineer, risk monitoring, and/or equivalent combination of education and experience required
Knowledge of concepts and principles in information security functional areas such as cloud security, firewalls and security mediation services, identity and access management, industry standard security frameworks, security controls, and compliance frameworks.
Experience with methods used in performing risk analyses and assessments and measuring cybersecurity compliance.
Experience maintaining and updating documentation necessary for supporting security environments, including policies, standards, patterns, and reference architectures.
Experience in working with compliance and regulatory program requirements.
CISSP – Certified Information Systems Security Professional preferred
CISA – Certified Information Systems Auditor preferred
CEH – Certified Ethical Hacker preferred
CCSP – Certified Cloud Security Professional preferred
GSEC – GIAC Security Essentials Certification preferred
GISP – GIAC Information Security Professional preferred.

Benefits

Comp & perks

Generous Paid Time Off (PTO) in addition to paid federal holidays.
Student debt employer repayment program.
401(k) retirement plan with a 6% match.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

IT security auditarchitecturerisk monitoringcloud securityfirewallsidentity and access managementrisk analysescybersecurity compliancesecurity assessmentssecurity configurations

Soft Skills

guidanceconsultingcommunicationproblem-solvingcollaboration

Certifications

CISSPCISACEHCCSPGSECGISP