Information Security Risk Analyst

First Tech Federal Credit Union; Hillsboro (OR); Hybrid; USD 74,000 - 89,000; Full time

Job summary

First Tech Federal Credit Union in Hillsboro, OR is seeking an Information Security Risk Management Analyst to support risk management activities across departments. This role collaborates with IT and business units to promote security best practices and ensure controls align with established requirements.

You will assist in risk assessments on systems, applications, vendors, and processes, maintain risk documentation, and support audits, training, and security awareness initiatives in a hybrid

Qualifications

• Bachelor's degree or 4 years of relevant experience.
• 2+ years in risk, compliance, or operational roles.
• Familiarity with information security risk management, compliance activities, and control frameworks.

Responsibilities

• Develop governance, risk, and compliance deliverables.
• Conduct risk assessments on systems, applications, vendors, and processes.
• Document and track risks, mitigation plans, and remediation efforts.
• Participate in third-party/vendor risk assessments and due diligence reviews.
• Develop and maintain security policies, standards, and procedures.
• Collaborate with IT and business units to support risk mitigation.
• Contribute to internal audits, control testing, and security awareness initiatives.
• Support security awareness initiatives and phishing education.
• Complete recurring security tasks related to compliance, DLP, and phishing response.
• Monitor regulatory developments to support compliance with NIST, CIS Controls, and CCM.
• Maintain knowledge of information security trends and threat vectors.

Skills

Risk management

Compliance

Governance

Vendor risk

Security policies

Analytical skills

Communication

Education

Bachelor's degree or 4 years experience

Job description

Description

The Information Security Risk Management Analyst supports the confidentiality, integrity, and availability of the credit union's processes, procedures, and systems by assisting with information security risk management activities. This role partners with departments across the credit union to promote security best practices, support risk assessment and compliance efforts, and help ensure processes, controls, and configurations align with established information security requirements.

Here's what you can expect from the job and what you need to be successful:

What You'll Do:

• Support the Information Security Risk Team and Management in developing and performing governance, risk, and compliance deliverables.
• Assist in conducting risk assessments on systems, applications, vendors, and business processes.
• Support the documentation and tracking of identified risks, mitigation plans, and remediation efforts.
• Participate in third-party/vendor risk assessments and due diligence reviews.
• Assist in the development and maintenance of security policies, standards, and procedures.
• Collaborate with IT and business units to gather information and support risk mitigation efforts.
• Contribute to internal audits, control testing, and security awareness initiatives as needed.
• Support security awareness initiatives, including employee communications, training activities, phishing education, and related program support.
• Complete recurring operational security tasks related to compliance, data loss prevention, phishing response, and other security program support activities.
• Monitor regulatory and industry developments to help support compliance with control frameworks such as NIST, CIS Controls, and the Cloud Controls Matrix (CCM).
• Maintain current knowledge of the information security industry, including security controls, improved security processes, emerging attacks, and evolving threat vectors.

Essential Skills:

• Required Education:Bachelors degree in field relevant to role (or 4 additional years of relevant experience in lieu of a degree)
• Required Experience:2+ years of relevant experience
• Experience in risk, compliance, or operational roles.
• Familiarity with information security risk management, compliance activities, security tools, and control frameworks.
• Basic knowledge of regulatory requirements applicable to financial institutions.
• Ability to adapt to changes in technology, business processes, and regulatory expectations.
• Strong analytical, problem-solving, and troubleshooting skills.
• Demonstrates accountability and the ability to work independently with appropriate guidance, direction, and follow-up.
• Effective interpersonal, communication, teamwork, organizational, and task management skills.
• Good written and verbal communication skills, including the ability to document meeting notes, action items, and follow-up requirements.
• Proficient in Microsoft Office, including Excel, Word, and PowerPoint.
• Analytical and problem solving skills.

Location: Hillsboro, OR |Marlborough/Chelmsford, MA

Target Compensation: $74,000 - $89,000

Schedule: Monday - Friday | 8am-5pm (Hybrid)

Who We Are:

Every great journey begins with a bold idea-and ours is no different. First Tech and DCU were founded on the belief that financial solutions should put people first. That belief has fueled decades of innovation and service, rooted in the tech sector and expanding to support members from all walks of life.

What makes First Tech different?

Employees are eligible for:

• Traditional medical, dental, and vision coverage
• Generous 401(k) match
• Paid Time Off: You'll accrue up to 15 days in your first year. In addition, you'll receive 40 hours of sick time and 3 personal days, which refresh annually
• Paid federal holidays
• Special employee pricing on lending products such as mortgage, auto, and personal loans (eligibility subject to standard account requirements and underwriting criteria)

Employment Statements:

First Tech is an equal opportunity employer, and we value diversity, inclusion, and equity at our company. We evaluate qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.

If you're applying for a job and need a reasonable accommodation for any part of the employment process, please send an email to [e-mail] and let us know the nature of your request and contact information. Please note that only those inquiries concerning a request for reasonable accommodation will be responded to from this email address.

First Tech is not currently offering Visa transfer/sponsorship for this position.