IT Risk Analyst II

IT Risk Analyst II page is loaded## IT Risk Analyst IIremote type:
Hybrid locations:
MO - Kansas City Downtown/Plaza - Kansas City - KC Downtown Trust Building (922 Walnut) (64106) time type:
Full time posted on:
Posted Todayjob requisition :
37462
** About Working at Commerce
** Building a career here is more than just steps on a ladder. It’s about helping people find financial safety and success, helping businesses thrive, and making sure people and their money are taken care of. And our commitment doesn’t stop there. Our culture is about our people, the ones in our communities and the ones that work with us.  Here, you’ll find opportunities to grow and learn, to connect with others, and build relationships with the people around you.

You’ll have the space and resources to grow into the best version of yourself. Because our number one investment is you.

Creating an award-winning culture doesn't come easy. And after 160 years, we know Commerce Bank is only at its best when our people are. If this sounds interesting to you, keep reading and let’s talk.

** Compensation Range
** Hourly: $39.40 - $46.40 (Amount based on relevant experience, skills, and competencies.)At Commerce Bank, innovation and creativity are the driving forces behind our IT team's success. We are catalysts of transformation who power applications, secure networks, and implement cutting-edge initiatives that propel our business units forward. The banking industry's rapid evolution provides us with an exciting opportunity to continuously learn, grow, and harness new technologies that elevate the experience for our customers.

What sets Commerce Bank apart is our company culture and leadership, areas in which we continually invest. This commitment fosters innovation, enhances customer and employee experiences, while reinforcing our belief that our diverse team is our greatest competitive advantage. We actively seek candidates who share our passion for technology and bring fresh perspectives to the table. A diversity of backgrounds, experiences, and viewpoints allows us to develop truly innovative solutions that meet the evolving needs of our banking community.

Join us in shaping the future of banking technology. At Commerce Bank IT, you'll find a culture of equity, belonging, and endless opportunities to make a lasting impact. Help us drive innovation that raises the bar for our industry.
** About This Job
** The main purpose of this job is to lead and execute critical functions across Operational Security and Information Security Risk Management. This role ensures the confidentiality, integrity, and availability of enterprise systems while managing risk and compliance obligations. You will oversee security operations, risk assessments, awareness programs, and vendor security monitoring, driving measurable improvements in security posture.
** Essential Functions
*** Manage and maintain secure SSO integrations across enterprise applications
* Investigate and resolve incidents related to brand impersonation, credential leaks, and external threats
* Plan and execute phishing simulations; track and report user performance metrics
* Document and summarize security incidents for executive and audit reporting
* Compile and present key security metrics (MTTD, MTTR, vulnerability SLAs, awareness KPIs)
* Schedule and manage penetration testing engagements; track remediation efforts
* Oversee social engineering testing and ensure findings are addressed
* Conduct security risk assessments for new contracts and vendors; ensure compliance with standards
* Assign and review risk assessments for new applications prior to deployment
* Maintain risk register; secure commitment dates for vulnerability remediation and track progress
* Continuously monitor third-party service providers for compliance and security posture
* Develop and deliver training programs to improve security culture
* Analyze annual report findings and align internal controls to industry benchmarks
* Perform other duties as assigned
** Knowledge, Skills & Abilities Required
*** Intermediate knowledge of User Awareness Training systems and Phishing Simulation administration
* Intermediate knowledge of…