Progressive Leasing is a leading provider of in-store and e-commerce lease-to-own solutions. As an almost 20 year old FinTech company that has gone from start-up to industry leader, we know how to innovate, simplify, and value all people. We are a company founded on our grit and we are constantly looking to the future. As an ever-evolving group of entrepreneurs and technologists, we strive to do the right thing period in all aspects of our work. We are a subsidiary of PROG Holdings (NYSE: PRG), an exciting FinTech holding company, with three business segments including Progressive, Vive Financial, and Four, a Buy Now Pay Later (BNPL) platform.
Progressive Leasing is a leading provider of in-store and e-commerce lease-to-own solutions. As an almost 20 year old FinTech company that has gone from start-up to industry leader, we know how to innovate, simplify, and value all people. We are a company founded on our grit and we are constantly looking to the future. As an ever-evolving group of entrepreneurs and technologists, we strive to do the right thing period in all aspects of our work.
We are a subsidiary of PROG Holdings (NYSE:PRG), an exciting FinTech holding company, with three business segments including Progressive, Vive Financial , and Four , a Buy Now Pay Later (BNPL) platform.
We are currently hiring a Lead Cyber Security Risk and Compliance Analyst focusing on security and awareness.
This role is a work from home position and can be performed remotely anywhere in the continental US or in our corporate office in Utah.
WE ARE: A team of Information Security professionals with a sharp focus on security and reliability. As a leading SaaS fintech company, we are dedicated to safeguarding our clients' data with the most advanced information security practices in the industry. Joining our InfoSec team means you'll be at the forefront of defending against cyber threats, leveraging cutting-edge technologies, and contributing to a culture that values innovation and excellence in every aspect of security. Your work here will not only protect our systems but also shape the future of financial security.
YOU ARE: As a Lead Cyber Security Risk and Compliance Analyst focusing on security and awareness, you are a meticulous and detail-oriented professional with a passion for ensuring the security and compliance of our organization's systems and processes. You possess a deep understanding of cybersecurity principles, risk management and methodologies. Your analytical mindset allows you to assess complex security risks and develop effective strategies to mitigate them. You are a proactive problem solver who thrives in a fast-paced environment and can communicate effectively with stakeholders at all levels.
Your day-to-day:

• Develop and implement a comprehensive cybersecurity awareness program tailored to the needs of our organization.
• Design and deliver engaging training sessions, workshops, and materials to educate employees on cybersecurity best practices, policies, and procedures.
• Create and maintain a library of educational resources, including articles, videos, infographics, and interactive modules.
• Collaborate with internal stakeholders to assess cybersecurity risks, identify training needs, and prioritize awareness initiatives.
• Plan and execute awareness campaigns to reinforce key messages and promote a security-conscious culture.
• Monitor and evaluate the effectiveness of cybersecurity awareness efforts through metrics, surveys, and feedback mechanisms.
• Stay informed about the latest cybersecurity threats, trends, and technologies to continuously improve awareness programs.
• Serve as a subject matter expert on cybersecurity awareness, providing guidance and support to employees and leadership.
• Foster a collaborative and inclusive environment that encourages participation and feedback from all stakeholders.
• Lead a team of cybersecurity awareness analysts, providing mentorship, guidance, and professional development opportunities.

You will bring:

• Bachelor's degree in Computer Science, Information Security, or a related field; relevant certifications (e.g., CISSP, CISM, CRISC, CISA) are highly desirable.
• Proven experience in security risk management, cyber security compliance, or related roles, preferably in a regulated industry such as finance, healthcare, or technology.
• Deep knowledge of cybersecurity frameworks, standards, and regulations, including but not limited to ISO 27001, NIST Cybersecurity Framework, GDPR, HIPAA, and PCI DSS.
• Strong analytical skills with the ability to assess and prioritize security risks and cyber security compliance requirements based on business impact.
• Excellent communication and interpersonal skills, with the ability to effectively engage with technical and non-technical stakeholders at all levels of the organization.
• Experience working with security technologies and tools such as SIEM, IDS/IPS, DLP, and vulnerability management solutions.
• Proven ability to work independently and collaboratively in a dynamic environment, managing multiple priorities and deadlines effectively.
• Commitment to continuous learning and professional development, staying abreast of industry trends and emerging technologies in cybersecurity and cyber security compliance.

Join our team and play a pivotal role in safeguarding our organization's assets, reputation, and success through effective security risk management and cyber security compliance practices.
Progressive Leasing welcomes and encourages diversity in the workplace. We do not discriminate in any aspect of employment on the basis of race, color, religion, national origin, ancestry, gender, sexual orientation, gender identity and/or expression, age, veteran status, disability, or any other characteristic protected by federal, state, or local employment discrimination laws where Progressive Leasing does business.