Hybrid Information Security Risk Analyst - Compliance

First Tech Federal Credit Union; Hillsboro (OR); Hybrid; USD 74,000 - 89,000; Full time

Job summary

First Tech Federal Credit Union in Hillsboro, OR is seeking an Information Security Risk Management Analyst to support risk management activities across departments. This role collaborates with IT and business units to promote security best practices and ensure controls align with established requirements.

You will assist in risk assessments on systems, applications, vendors, and processes, maintain risk documentation, and support audits, training, and security awareness initiatives in a hybrid

Qualifications

• Bachelor's degree or 4 years of relevant experience.
• 2+ years in risk, compliance, or operational roles.
• Familiarity with information security risk management, compliance activities, and control frameworks.

Responsibilities

• Develop governance, risk, and compliance deliverables.
• Conduct risk assessments on systems, applications, vendors, and processes.
• Document and track risks, mitigation plans, and remediation efforts.
• Participate in third-party/vendor risk assessments and due diligence reviews.
• Develop and maintain security policies, standards, and procedures.
• Collaborate with IT and business units to support risk mitigation.
• Contribute to internal audits, control testing, and security awareness initiatives.
• Support security awareness initiatives and phishing education.
• Complete recurring security tasks related to compliance, DLP, and phishing response.
• Monitor regulatory developments to support compliance with NIST, CIS Controls, and CCM.
• Maintain knowledge of information security trends and threat vectors.

Skills

Risk management

Compliance

Governance

Vendor risk

Security policies

Analytical skills

Communication

Education

Bachelor's degree or 4 years experience

Job description

First Tech Federal Credit Union in Hillsboro, OR is seeking an Information Security Risk Management Analyst to support risk management activities across departments. This role collaborates with IT and business units to promote security best practices and ensure controls align with established requirements.

You will assist in risk assessments on systems, applications, vendors, and processes, maintain risk documentation, and support audits, training, and security awareness initiatives in a hybrid