Cyber Risk & Compliance Associate

University Federal Credit Union; Austin (TX); Hybrid; USD 70,000 - 90,000; Full time

Job summary

University Federal Credit Union is seeking an Associate Cyber Risk Analyst in Austin, TX. This exempt role coordinates governance, risk, and compliance activities across UFCU's cybersecurity program and collaborates with Security, Risk, Audit, Legal, HR, and IT teams to collect evidence, track commitments, and improve documentation.

The position supports audits, due diligence, and the lifecycle of security processes, and administers security awareness training and phishing exercises.

Qualifications

• Bachelor's degree in cybersecurity, information systems, business, risk management, communications, or a related field
• 0-2 years of relevant experience in cybersecurity, governance, risk, compliance, IT audit, information security, records management, training coordination, or a related field
• Experience developing or maintaining business or technical processes, procedures, standards, training content, or program communications
• Must be bondable

Responsibilities

• Coordinate governance, risk and compliance activities within audits and third-party due diligence
• Maintain audit evidence, control narratives, and program documentation
• Prepare dashboards and program updates communicating cybersecurity activities and risks
• Administer security awareness training and phishing exercises

Skills

Project coordination

Written communications

Records management

Data analysis & reporting

GRC platforms

Education

Bachelor's degree in cybersecurity/information systems/risk management

Tools

Power BI

SharePoint

Microsoft 365

Job description

University Federal Credit Union is seeking an Associate Cyber Risk Analyst in Austin, TX. This exempt role coordinates governance, risk, and compliance activities across UFCU's cybersecurity program and collaborates with Security, Risk, Audit, Legal, HR, and IT teams to collect evidence, track commitments, and improve documentation.

The position supports audits, due diligence, and the lifecycle of security processes, and administers security awareness training and phishing exercises.