Information Security Data Analyst

The Clearing House Payments Company L.L.C.; Charlotte (NC); On-site; USD 80,000 - 130,000; Full time

Job summary

The Clearing House Payments Company L.L.C. is seeking an Information Security Data Analyst to support cybersecurity risk reporting, data analysis, and performance measurement across the enterprise information security program.

The role focuses on turning complex cybersecurity data into actionable insights to support operational decisions, risk management, and executive reporting. You will collaborate with Security Operations, Vulnerability Management, Identity and Access Management,

Qualifications

• Strong data analytics capabilities applied to cybersecurity data.
• Ability to translate large volumes of technical information into clear, actionable insights.
• Experience developing automated reports, dashboards, and metrics for security programs.

Responsibilities

• Collect, analyze, validate, and interpret cybersecurity data from multiple enterprise security platforms.
• Develop and maintain dashboards, reports, and analytical models that measure cybersecurity risk, operational effectiveness, and control performance.
• Transform complex technical data into clear, actionable insights for Information Security leadership, executive management, and risk committees.
• Identify trends, anomalies, emerging risks, and opportunities for improvement across cybersecurity operations.
• Establish repeatable reporting processes that improve accuracy, consistency, and timeliness.
• Automate data collection, transformation, reconciliation, and reporting to reduce manual effort.
• Support the development of cybersecurity KRIs, KPIs, and operational metrics.
• Maintain documentation of data sources, metric definitions, calculations, assumptions, and reporting methodologies.

Skills

Data analytics

Cybersecurity basics

Reporting & dashboards

Tools

Tenable

ServiceNow

Job description

Position Summary

The Clearing House is seeking an analytical and technically skilled Information Security Data Analyst to support cybersecurity risk reporting, data analysis, and performance measurement across the enterprise Information Security program.

This role is responsible for transforming complex cybersecurity data into accurate, actionable insights that support operational decision-making, risk management, regulatory oversight, and executive reporting.

The Information Security Data Analyst will work closely with Security Operations, Vulnerability Management, Identity and Access Management, Infrastructure, and Technology Risk teams to develop automated reporting, dashboards, and metrics that provide visibility into the organization's cybersecurity posture.

A key focus of this position will be vulnerability management analytics, including the analysis of vulnerability exposure, remediation performance, asset criticality, and compliance with established remediation timelines.

The ideal candidate combines strong data analytics capabilities with an understanding of cybersecurity concepts and can translate large volumes of technical information into clear, meaningful insights for technical teams and senior leadership.

About The Clearing House: The Clearing House Payments Company L.L.C. is a bank-owned industry utility that shapes the payments landscape and provides infrastructure for safe, reliable, and efficient payments. We see an economy where everyone is connected and a future where modern payments make life easier. The Clearing House operates four payment systems: a high-value wire-transfer system (the CHIPS® network), the country's first and largest instant payments system (the RTP® network), an automated clearinghouse network (the EPN® network), and a check image exchange network (the Image Exchange Network). TCH also operates a bank account number tokenization service, runs a payments association known as the TCH Payments Authority, and maintains the rules for private-sector check image exchange through its ECCHO® business line.

Key Responsibilities

Cybersecurity Data Analytics & Reporting

• Collect, analyze, validate, and interpret cybersecurity data from multiple enterprise security platforms.
• Develop and maintain dashboards, reports, and analytical models that measure cybersecurity risk, operational effectiveness, and control performance.
• Transform complex technical data into clear, actionable insights for Information Security leadership, executive management, and risk committees.
• Identify trends, anomalies, emerging risks, and opportunities for improvement across cybersecurity operations.
• Establish repeatable reporting processes that improve accuracy, consistency, and timeliness.
• Automate data collection, transformation, reconciliation, and reporting to reduce manual effort.
• Support the development of cybersecurity key risk indicators (KRIs), key performance indicators (KPIs), and operational metrics.
• Maintain clear documentation of data sources, metric definitions, calculations, assumptions, and reporting methodologies.

Vulnerability Management Analytics

• Develop and maintain vulnerability reporting across on-premises infrastructure, cloud environments, applications, and enterprise platforms.
• Analyze vulnerability data from Tenable, ServiceNow Vulnerability Response, and other relevant security tools.
• Track critical and high-severity vulnerabilities, remediation timelines, aging, exceptions, and exposure beyond established service-level agreements.
• Correlate vulnerability findings with asset inventories, business criticality, ownership, and operational context to improve risk-based prioritization.
• Identify recurring vulnerabilities, remediation bottlenecks, data quality issues, and emerging exposure trends.
• Develop reporting that distinguishes newly discovered vulnerabilities from existing exposure, overdue remediation, and changes resulting from expanded scanning coverage.
• Partner with infrastructure and application teams to validate vulnerability data, identify remediation owners, and improve reporting accuracy.
• Support vulnerability governance meetings through preparation of metrics, trend analysis, and executive-level reporting.
• Develop analytical capabilities to measure remediation progress and assess the effectiveness of vulnerability management activities.

Security Metrics & Risk Reporting

• Support the design, development, and maintenance of Information Security KRIs and KPIs aligned with enterprise risk management requirements.
• Produce recurring cybersecurity reporting for executive leadership, risk committees, and other governance forums.
• Analyze trends in security incidents, vulnerability exposure, identity controls, security monitoring, and remediation effectiveness.
• Establish consistent calculation methodologies, reporting thresholds, and data quality controls.
• Investigate unexpected changes in metrics and distinguish actual risk increases from changes in detection capabilities, sc