Cyber Defense Analyst

Allegacy; Northern (KY); Hybrid; USD 42,000 - 64,000; Full time

Job summary

Allegacy seeks an entry-level Cybersecurity Analyst I to support risk management, policy administration, and security awareness initiatives. You will help translate cybersecurity requirements into practical actions for business teams and assist in audit-ready documentation.

Responsibilities include risk assessments, policy maintenance, remediation tracking, and evidence collection. A Bachelor’s degree in a related field is preferred with 0–2 years of experience.

Qualifications

• Bachelor’s degree required or equivalent experience.
• 0–2 years in cybersecurity, IT, audit, compliance, risk, or related field.
• Preferred certifications: ISC2 CC, Security+, ITIL Foundation.

Responsibilities

• Assist with cybersecurity risk assessments and documentation.
• Support security awareness and training activities.
• Maintain cybersecurity policies, standards, and procedures.
• Track remediation actions and follow-up items.
• Assist with third-party or vendor risk assessments.
• Support audit preparation and evidence collection.
• Review security-related requests and intake submissions.
• Support cybersecurity metrics and reporting.
• Document security incidents, outcomes, and lessons learned.
• Maintain inventories of risks, controls, exceptions, and related artifacts.

Skills

Written communication

Organization

Attention to detail

Collaboration

Documentation discipline

Critical thinking

Time management

Curiosity and learning

Education

Bachelor's degree in Cybersecurity/Information Systems/Business/Risk Management

Job description

Description

At Allegacy, our roots run deep — anchored in a longstanding commitment to doing right by our members and the communities we serve. Every role within our organization plays a vital part in nurturing the relationships that make that promise real. As a member of our team, you'll be empowered to live out our brand every day, building meaningful connections that support the financial wellbeing of those who count on us most.

Position Summary

The Cybersecurity Analyst role focuses on the people, process, governance, risk, compliance, awareness, and coordination aspects of cybersecurity. Analysts serve as trusted advisors who translate cybersecurity requirements into practical actions for business teams, support audit-ready documentation, and help leaders understand risk in business terms.

Position Purpose:

The Cybersecurity Analyst I is an entry-level cybersecurity professional responsible for supporting risk management, compliance activities, policy administration, security awareness initiatives, and cybersecurity program documentation.

Primary Responsibilities

• Assist with cybersecurity risk assessments and documentation
• Support security awareness and training activities
• Maintain cybersecurity policies, standards, and procedures
• Track remediation actions and follow-up items
• Assist with third-party or vendor risk assessments
• Support audit preparation and evidence collection
• Review security-related requests and intake submissions
• Support cybersecurity metrics and reporting
• Document security incidents, outcomes, and lessons learned
• Maintain inventories of risks, controls, exceptions, and related artifacts

Core Competencies

• Written and verbal communication
• Organization and planning
• Attention to detail
• Professional collaboration
• Documentation discipline
• Critical thinking
• Time management
• Curiosity and willingness to learn

Requirements

Cybersecurity Knowledge

• Basic cybersecurity concepts
• Risk management fundamentals
• Security policies and standards
• Regulatory compliance awareness
• Cybersecurity governance principles

Experience, Education, and Preferred Certifications

• Experience: 0 to 2 years of cybersecurity, IT, audit, compliance, risk, or related experience
• Education: Bachelor’s degree in Cybersecurity, Information Systems, Business, Risk Management, or equivalent experience
• Preferred certifications: ISC2 Certified in Cybersecurity (CC), Security+, ITIL Foundation