Cyber Risk & Compliance Associate

UFCU Financial Services, LLC; Austin (TX); Hybrid; USD 70,000 - 110,000; Full time

Job summary

UFCU Financial Services, LLC, in Austin, TX, seeks an Associate Cyber Risk Analyst to coordinate governance, risk, and compliance activities supporting the cybersecurity program. You will organize internal audits, third-party due diligence, evidence collection, and the development of security processes across IT and business teams.

This hybrid role reports to the Director of Information Security and emphasizes documentation, dashboards, and security awareness program administration.

Qualifications

• Bachelor's degree in cybersecurity, information systems, business, risk management, communications, or related field.
• 0-2 years of relevant experience in cybersecurity, governance, risk, compliance, IT audit, information security, or records management.
• Experience developing or maintaining business or technical processes, procedures, standards, training content, or program communications.
• Must be bondable and able to obtain any required security clearances.

Responsibilities

• Coordinate governance, risk, and compliance activities across the cybersecurity program.
• Organize participation in internal audits, third-party due diligence, and regulatory reviews.
• Maintain audit evidence, schedules, and remediation status with stakeholders.
• Prepare dashboards, reports, and program updates for technical and business audiences.
• Administer security awareness training and phishing exercise programs.

Skills

Project coordination

Documentation & writing

Records management

Data analysis / dashboards

Microsoft 365 / governance tools

Education

Bachelor's degree in cybersecurity / information systems / business / risk management / communications

0-2 years in cybersecurity, governance, risk, compliance, IT audit, or related

Tools

Power BI

SharePoint

Microsoft 365 tools

Job description

UFCU Financial Services, LLC, in Austin, TX, seeks an Associate Cyber Risk Analyst to coordinate governance, risk, and compliance activities supporting the cybersecurity program. You will organize internal audits, third-party due diligence, evidence collection, and the development of security processes across IT and business teams.

This hybrid role reports to the Director of Information Security and emphasizes documentation, dashboards, and security awareness program administration.