Info Sec Risk Analyst II, Full-Time, Hybrid, Marlborough MA

Overview

The Information Security Risk Analyst will support overseeing the confidentiality, integrity, and availability as it relates to the credit union's process, procedures, and systems. Working with departments across the credit union to ensure security best practices in existing and current processes and configurations throughout the organization.

What You'll Do

Summary / Objective : The Information Security Risk Analyst will support overseeing the confidentiality, integrity, and availability as it relates to the credit union's process, procedures, and systems. Working with departments across the credit union to ensure security best practices in existing and current processes and configurations throughout the organization.

Essential Functions :

• Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
• Support the Information Security Risk Team and Lead in developing and performing Governance, Risk and Compliance deliverables.
• Conduct risk assessments and control evaluations across systems, applications, and third-party vendors.
• Assist in managing regulatory compliance and control frameworks such as NCUA, GLBA, NIST and CIS.
• Support the development, implementation, and maintenance of security policies, standards, and procedures.
• Monitor and report on the effectiveness of security controls and risk mitigation strategies.
• Participate in internal and external audits, including evidence collection and remediation tracking.
• Contribute to security awareness and training initiatives.
• Complete daily operational tasks relating to the security program including but not limited to compliance, Data Loss, Phishing, and weekly support activities.
• Maintain System Ownership responsibilities for domain area(s) by updating documentation, performing quarterly reviews, and tracking of new features, as needed.
• Gather and prepare monthly Information Security metric reports for management.
• Maintain up-to-date knowledge of the IT security industry including awareness of security controls, improved security processes and the development of new attacks and threat vectors.
• Assist Information Systems and business areas to complete periodic tabletop, business continuity and disaster recovery exercises.
• Collaborate with Digital Federal Credit Union staff and management in ensuring that all departments have fulfilled their information security responsibilities.
• Perform other job-related duties as assigned by Manager(s).

What You'll Need

Education and Experience Requirements :

What We Do

DCU is the largest credit union headquartered in New England - serving more than one million members in all 50 states. With over 1,700 team members, we strive to make DCU a great place to work with an excellent work-life balance and a community that cares.

DCU is an equal-opportunity employer, and we value diversity, inclusion, and equity at our company. We evaluate qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.

If you're applying for a job and need a reasonable accommodation for any part of the employment process, please send an email to careers@dcu.org and let us know the nature of your request and contact information. Please note that only those inquiries concerning a request for reasonable accommodation will be responded to from this email address.

DCU is not currently offering Visa transfer / sponsorship for this position.

Expected Pay Range

$78,900 - $88,800

Equal Opportunity Employer / Protected Veterans / Individuals with Disabilities. This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.

DCU is not currently offering Visa transfer / sponsorship for this position.

#J-18808-Ljbffr