InfoSec Compliance Analyst #Hybrid

In this role, you will support the Information security governance, risk management and compliance program, focusing on compliance and assurance. Facilitate the compliance and assurance program, by performing assurance assessments to ensure Alliant Credit Union (ACU) is compliant with regulatory and legal obligations. Help maintain the technical control library ensure assessments align securing ACU. Facilitate IT issue management by work with employees on scheduling calls and going over the issue and resolution.

Responsibilities

• Responsible to facilitate the compliance and assurance assessments and issue management via a GRC tool.
• Conduct assurance assessment, including control test of design (ToD) and test of operating effectiveness (TOE) activities.
• Provide recommendations on improving compliance-related processes and / or procedures and identify opportunities for ITGC / security compliance control automation.
• Facilitate group and individual meetings, ensure that each meeting is organized and aligned and schedule walkthrough agenda addressing any issue that arise and and guiding towards actionable outcomes.
• Assist internal and external audit teams to address inquiries.
• Participate in InfoSec projects as assigned by management such as the review of documents.

Education :

Years of Experience :

In Lieu of Education :

License / Certifications / Training :

Compensation & Benefits :

Typical hiring range : ‏‏ $67,100‏‏ -‏‏ $94,750 Annually. Actual compensation will be determined using factors such as experience, skills & knowledge.

Additional Compensation : Annual performance bonus

Benefits : Alliant provides a benefits package including health care, vision, dental, and 401k with employer match.

Additional Benefits :

Adhere to and ensure compliance of all business transactions with policy and process of the Bank Secrecy Act. Ensures compliance with all applicable state and federal laws, company procedures and policies. Maintains integrity and ethics in all actions and conversations with or regarding credit union members and their accounts; complies with Privacy Act directives.

The responsibilities listed do not contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this position. Duties, responsibilities and activities may change at any time with or without notice.