Information Security Risk Analyst

First Tech Federal Credit Union; Marlborough (MA); Hybrid; USD 74,000 - 89,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

401(k) match

PTO and holidays

Employee pricing on lending products

Job summary

First Tech Federal Credit Union is seeking an Information Security Risk Management Analyst to support governance, risk, and control activities across departments. You will assist with risk assessments, remediation tracking, and third-party due diligence while helping develop security policies and awareness programs.

Ideal candidates will have a related bachelor's degree (or 4 years of additional experience) and 2+ years in risk, compliance, or operational roles, with strong analytical and

Qualifications

• Bachelor's degree or 4 years of relevant experience in lieu of degree.
• 2+ years of relevant experience.
• Experience in risk, compliance, or operational roles.
• Familiarity with information security risk management, compliance activities, security tools, and control frameworks.
• Basic knowledge of regulatory requirements applicable to financial institutions.

Responsibilities

• Assist in governance, risk, and compliance deliverables.
• Conduct risk assessments on systems, applications, vendors, and processes.
• Track identified risks, mitigation plans, and remediation efforts.
• Participate in third-party/vendor risk assessments and due diligence reviews.
• Develop and maintain security policies, standards, and procedures.
• Collaborate with IT and business units to support risk mitigation.
• Support internal audits, control testing, and security awareness initiatives.
• Assist with security awareness programs including phishing education.
• Complete recurring operational security tasks related to compliance and data protection.
• Monitor regulatory developments to support compliance with NIST, CIS Controls, and CCM.

Skills

Risk management

Compliance

Analytical skills

Communication

Microsoft Office

Problem solving

Education

Bachelor's degree or 4 years of relevant experience

Tools

Excel

PowerPoint

Policy management tools

Job description

Description

The Information Security Risk Management Analyst supports the confidentiality, integrity, and availability of the credit union's processes, procedures, and systems by assisting with information security risk management activities. This role partners with departments across the credit union to promote security best practices, support risk assessment and compliance efforts, and help ensure processes, controls, and configurations align with established information security requirements.

Here's what you can expect from the job and what you need to be successful:

What You'll Do:

• Support the Information Security Risk Team and Management in developing and performing governance, risk, and compliance deliverables.
• Assist in conducting risk assessments on systems, applications, vendors, and business processes.
• Support the documentation and tracking of identified risks, mitigation plans, and remediation efforts.
• Participate in third-party/vendor risk assessments and due diligence reviews.
• Assist in the development and maintenance of security policies, standards, and procedures.
• Collaborate with IT and business units to gather information and support risk mitigation efforts.
• Contribute to internal audits, control testing, and security awareness initiatives as needed.
• Support security awareness initiatives, including employee communications, training activities, phishing education, and related program support.
• Complete recurring operational security tasks related to compliance, data loss prevention, phishing response, and other security program support activities.
• Monitor regulatory and industry developments to help support compliance with control frameworks such as NIST, CIS Controls, and the Cloud Controls Matrix (CCM).
• Maintain current knowledge of the information security industry, including security controls, improved security processes, emerging attacks, and evolving threat vectors.

Essential Skills:

• Required Education:Bachelors degree in field relevant to role (or 4 additional years of relevant experience in lieu of a degree)
• Required Experience:2+ years of relevant experience
• Experience in risk, compliance, or operational roles.
• Familiarity with information security risk management, compliance activities, security tools, and control frameworks.
• Basic knowledge of regulatory requirements applicable to financial institutions.
• Ability to adapt to changes in technology, business processes, and regulatory expectations.
• Strong analytical, problem-solving, and troubleshooting skills.
• Demonstrates accountability and the ability to work independently with appropriate guidance, direction, and follow-up.
• Effective interpersonal, communication, teamwork, organizational, and task management skills.
• Good written and verbal communication skills, including the ability to document meeting notes, action items, and follow-up requirements.
• Proficient in Microsoft Office, including Excel, Word, and PowerPoint.
• Analytical and problem solving skills.

Location: Hillsboro, OR |Marlborough/Chelmsford, MA

Target Compensation: $74,000 - $89,000

Schedule: Monday - Friday | 8am-5pm (Hybrid)

Who We Are:

Every great journey begins with a bold idea-and ours is no different. First Tech and DCU were founded on the belief that financial solutions should put people first. That belief has fueled decades of innovation and service, rooted in the tech sector and expanding to support members from all walks of life.

What makes First Tech different?

Employees are eligible for:

• Traditional medical, dental, and vision coverage
• Generous 401(k) match
• Paid Time Off: You'll accrue up to 15 days in your first year. In addition, you'll receive 40 hours of sick time and 3 personal days, which refresh annually
• Paid federal holidays
• Special employee pricing on lending products such as mortgage, auto, and personal loans (eligibility subject to standard account requirements and underwriting criteria)

Employment Statements:

First Tech is an equal opportunity employer, and we value diversity, inclusion, and equity at our company. We evaluate qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.

If you're applying for a job and need a reasonable accommodation for any part of the employment process, please send an email to [e-mail] and let us know the nature of your request and contact information. Please note that only those inquiries concerning a request for reasonable accommodation will be responded to from this email address.

First Tech is not currently offering Visa transfer/sponsorship for this position.