Cybersecurity Analyst

About the role

Zions Bancorporation’s Cybersecurity team is transforming what it means to work for a financial institution. With a commitment to protecting our bank and providing our community, clients, and colleagues the best experience possible for over 150 years, we are seeking a Cybersecurity Analyst to join our Enterprise Information Security (EIS) Governance, Risk and Compliance (GRC) team.

Responsibilities

• Cybersecurity Analyst will support the day-to-day coordination of the Bank’s GLBA 501(b) Safeguard Program by organizing reporting, performing workflows, tracking remediation activities, and facilitating communication among key stakeholders across the enterprise.
• The GLBA analyst ensures program tasks progress on schedule, documentation remains current, and stakeholders receive the information and support needed to meet GLBA requirements.
• The Cybersecurity Analyst will play a key role in identifying and communicating risk through involvement in the annual risk assessment, and the creation of the annual report that is provided to the Board of Directors.
• The Cybersecurity Analyst will design and enhance processes that operationalize key elements of the information security program.
• The Cybersecurity Analyst will also gain key insights into today’s evolving and complex risk and regulatory landscape by collaborating with internal cybersecurity teams, business stakeholders, and technology teams to support the development and execution of a comprehensive information security program.
• The Cybersecurity Analyst will: Coordinate the program risk assessment, and creation of a GLBA annual report that is provided to the Board of Directors.
• Cybersecurity Analyst will Coordinate and maintain key GLBA stakeholders to gather information needed for program reporting activities and control execution.
• Support senior cybersecurity leaders by preparing draft materials for program updates, dashboards, and operational reviews.
• Track formal improvement areas and remediation items across all GLBA domains, ensuring owners provide updates and evidence.
• Maintain structured remediation logs with statuses, due dates, dependencies, and risk impact and escalate overdue or stalled remediation items to senior GRC leadership.
• Collect, organize, and validate control evidence across Program control owners, ensure evidence meets quality standards (accuracy, completeness, timeliness), and Maintain audit-ready evidence repositories and version-controlled documentation.
• Update the risk register with new risks, mitigation notes, and status changes. Ensure risks are correctly mapped to domains and remediation items and coordinate with control owners to validate progress and document updates.
• Review and prioritize alerts from the compliance platform to drive visibility and awareness into the evolving regulatory landscape to understand new or changing security requirements.

Requirements

• Familiarity and understanding of key laws and regulations that influence information security practices and trigger security requirements within the financial services sector, including the Gramm-Leach-Bliley Act.
• Familiarity with cybersecurity frameworks and other relevant authoritative resources, including the National Institute of Standards and Technology Cybersecurity Framework (NIST CSF), NIST 800-53, and the Federal Financial Examination Council (FFIEC) IT Booklets, such as the Information Security Booklet.
• Proficiency in information security domains, including policies and standards, cyber risk management, regulatory compliance, Identity Access Management and others.
• Experience with GRC platforms preferred.
• Ability to lead cross-functional, multi-disciplinary projects and collaborate with high-performing teams and individuals across the organization to accomplish common goals.
• Bachelor’s degree in a related field (cybersecurity, information technology, information systems) or equivalent experience in cybersecurity, information technology, or other directly related technical experience.

Location

This position is fully in office (5 days a week) at the Zions Technology Center - 7860 South Bingham Junction Blvd, Midvale, UT 84047 The Zions Technology Center is a 400,000-square-foot technology campus in Midvale, Utah. Located on the former Sharon Steel Mill superfund site, the sustainably built campus is the company’s primary technology and operations center. This modern and environmentally friendly technology center enables Zions to compete for the best technology talent in the state while providing team members with an exceptional work environment with features such as: Electric vehicle charging stations and close proximity to Historic Gardner Village UTA TRAX station. At least 75% of the building is powered by on-site renewable solar energy. Access to outdoor recreation, parks, trails, shareable bikes and locker rooms. Large modern cafe with a healthy and diverse menu. Healthy indoor environment with ample natural light and fresh air. LEED-certified sustainable building that features include the use of low VOC-emitting construction materials.

Benefits

• Medical, Dental and Vision Insurance - START DAY ONE!
• Life and Disability Insurance, Paid Parental Leave and Adoption Assistance
• Health Savings (HSA), Flexible Spending (FSA) and dependent care accounts
• Paid Training, Paid Time Off (PTO) and 11 Paid Federal Holidays
• 401(k) plan with company match, Profit Sharing, competitive compensation in line with work experience
• Mental health benefits including coaching and therapy sessions
• Tuition Reimbursement for qualifying employees
• Employee Ambassador preferred banking products