Information Security Risk Analyst

Description

The Information Security Risk Management Analyst supports the confidentiality, integrity, and availability of the credit union’s processes, procedures, and systems by assisting with information security risk management activities. This role partners with departments across the credit union to promote security best practices, support risk assessment and compliance efforts, and help ensure processes, controls, and configurations align with established information security requirements.

Here’s what you can expect from the job and what you need to be successful:

What You'll Do

• Support the Information Security Risk Team and Management in developing and performing governance, risk, and compliance deliverables.
• Assist in conducting risk assessments on systems, applications, vendors, and business processes.
• Support the documentation and tracking of identified risks, mitigation plans, and remediation efforts.
• Participate in third-party/vendor risk assessments and due diligence reviews.
• Assist in the development and maintenance of security policies, standards, and procedures.
• Collaborate with IT and business units to gather information and support risk mitigation efforts.
• Contribute to internal audits, control testing, and security awareness initiatives as needed.
• Support security awareness initiatives, including employee communications, training activities, phishing education, and related program support.
• Complete recurring operational security tasks related to compliance, data loss prevention, phishing response, and other security program support activities.
• Monitor regulatory and industry developments to help support compliance with control frameworks such as NIST, CIS Controls, and the Cloud Controls Matrix (CCM).
• Maintain current knowledge of the information security industry, including security controls, improved security processes, emerging attacks, and evolving threat vectors.
  
  

Essential Skills

• Required Education: Bachelors degree in field relevant to role (or 4 additional years of relevant experience in lieu of a degree)
• Required Experience: 2 years of relevant experience
• Experience in risk, compliance, or operational roles.
• Familiarity with information security risk management, compliance activities, security tools, and control frameworks.
• Basic knowledge of regulatory requirements applicable to financial institutions.
• Ability to adapt to changes in technology, business processes, and regulatory expectations.
• Strong analytical, problem-solving, and troubleshooting skills.
• Demonstrates accountability and the ability to work independently with appropriate guidance, direction, and follow-up.
• Effective interpersonal, communication, teamwork, organizational, and task management skills.
• Good written and verbal communication skills, including the ability to document meeting notes, action items, and follow-up requirements.
• Proficient in Microsoft Office, including Excel, Word, and PowerPoint.
• Analytical and problem‑solving skills.
  
  

Location: Hillsboro, OR |Marlborough/Chelmsford, MA

Target Compensation:$74,000 - $89,000

Schedule:Monday – Friday | 8am-5pm (Hybrid)

Who We Are

What makes First Tech different? Click here to learn more!

Every great journey begins with a bold idea—and ours is no different. First Tech and DCU were founded on the belief that financial solutions should put people first. That belief has fueled decades of innovation and service, rooted in the tech sector and expanding to support members from all walks of life.

Employees Are Eligible For

• Traditional medical, dental, and vision coverage
• Generous 401(k) match
• Paid Time Off: You'll accrue up to 15 days in your first year. In addition, you'll receive 40 hours of sick time and 3 personal days, which refresh annually
• Paid federal holidays
• Special employee pricing on lending products such as mortgage, auto, and personal loans (eligibility subject to standard account requirements and underwriting criteria)
  
  

Employment Statements

First Tech is an equal opportunity employer, and we value diversity, inclusion, and equity at our company. We evaluate qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.

If you're applying for a job and need a reasonable accommodation for any part of the employment process, please send an email to recruiters@firsttechfed.com and let us know the nature of your request and contact information. Please note that only those inquiries concerning a request for reasonable accommodation will be responded to from this email address.

First Tech is not currently offering Visa transfer/sponsorship for this position.