Cybersecurity Governance and Risk Analyst

Hvcu; Town of Poughkeepsie (NY); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Base & Variable Pay Structures

Paid Personal, Holiday & VolunteerTime

Professional Development & Training

Student Loan Repayment & Tuition Reimb

Medical, Dental & Vision Coverage

401(k) With Employer Match

Life, Short-term & Long-term Discount

Job summary

Hudson Valley Credit Union is seeking a Cybersecurity Governance and Risk Analyst to design and implement a robust governance framework aligned with strategic objectives. You will develop policies, standards and controls to advance maturity and ensure regulatory compliance.

Collaborate with internal and external partners, monitor governance activities, and guide risk-based improvements across data protection, privacy, and security programs while staying current with industry frameworks such as

Qualifications

• Minimum 3 years of experience in cybersecurity governance & risk.
• Bachelor’s degree or equivalent in information security or related field.
• Relevant certifications recommended (e.g., NIST RMF, CISSP, CISM).

Responsibilities

• Develops and maintains a comprehensive cybersecurity governance vision.
• Engages with data stakeholders to implement governance standards.
• Guides design and optimization of governance and risk frameworks.
• Ensures regulatory compliance and data privacy alignment.
• Adheres to policies and participates in required training.

Skills

Cybersecurity governance

Risk management

Stakeholder communication

Education

Bachelor’s Degree or equivalent in Information Security/related field

Job description

Overview

Hudson Valley Credit Union is currently recruiting for the position of Cybersecurity Governance and Risk Analyst. Primary Function:Collaborates with internal and external partners to design and implement a robust Cybersecurity Governance framework tailored to Hudson Valley Credit Union’s strategic objectives. This includes developing policies, standards, and best practices that advance organizational Cybersecurity Governance maturity. Conducts ongoing assessments of Cybersecurity Governance maturity in partnership with cross-functional stakeholders, ensuring all processes align with industry-recognized frameworks such as NIST. Continuously monitors, measures, and enhances Cybersecurity Governance activities to drive measurable improvements, ensuring regulatory compliance and maintaining the ongoing integrity and security of the organization.

Responsibilities

• Develops and maintains a comprehensive Cybersecurity management vision for Hudson Valley Credit Union, establishing strategic roadmaps for data governance that align with organizational goals and maximize member value.
• Engages with data stakeholders across departments, facilitating communication and collaboration to ensure the effective implementation of Cybersecurity governance standards and promote a culture of accountability.
• Brings advanced expertise in governance technologies, guiding teams in the design, implementation, and optimization of scalable solutions that support Cybersecurity Governance & Risk frameworks.
• Champions cybersecurity practices, embedding compliance, ethical standards, and governance throughout all management processes. Collaborate with legal and compliance teams to address data privacy, regulatory obligations, and ethical considerations.
• Prioritizes the needs of members, and internal stakeholders in all Cybersecurity governance initiatives, leveraging research and analytics to enhance the impact of data-driven solutions and improve user experience.
• Stays current with advancements in Cybersecurity governance, and evolving regulatory landscapes, promoting professional development and fostering innovation in all Cybersecurity Governance activities.
• Adhere to all Credit Union policies, procedures, and regulatory agency requirements. Participate in all required and recommended training and development including, but not limited to, Bank Secrecy Act training (BSA) and demonstrate attained knowledge. Participate on Credit Union teams, projects and strategic initiatives when the opportunity arises. Perform additional duties and special projects as assigned.
• Embrace and apply HVCU’s guiding principles to all activities and responsibilities. This includes the Credit Union’s Mission, Vision, Core Values, Employee and Member Value Propositions, Sales and Service Model, and commitment to Lean Six Sigma practices. Support the Credit Union’s initiatives by demonstrating teamwork and professionalism.
• Responsible for regular and predictable attendance including punctuality.

Qualifications

• Bachelor’s Degree or at least 2 years equivalent experience for each undergraduate year not completed; undergraduate degree cannot substitute for minimum number of years of experience in Information security, Computer Science, Information Management, or related fieldrequired
• Relevant certifications recommended: NIST RMF Training or Certificate, ISO/IEC 27001, CISSP, CRISC, CISM, CISA preferred.
• Minimum 3 years prior experience in cybersecurity governance & risk required.

Why Choose HVCU?

Join a team where your growth matters. At Hudson Valley Credit Union, we offer a supportive, community-focused culture, competitive benefits, and opportunities to grow your career while making a meaningful impact. Come be part of a Great Place to Work!

Employee Perks:

• Base & Variable Pay Structures
• Paid Personal, Holiday & Volunteer Time Off
• Professional Development & Training
• Student Loan Repayment & Tuition Reimbursement Programs
• Medical, Dental & Vision Coverage
• 401(k) With Employer Match & Non-Elective Employer Contribution
• Life, Short-term & Long-term Disability Insurance
• Discounted Loan Rates & Fees

Hudson Valley Federal Credit Union is an AA/EEO employer committed to equal opportunity and employee diversity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, sexual orientation, gender identity, national origin, disability, military or veteran status, genetic information, marital or familial status, domestic violence victim status, or any other characteristic protected by law.