InfoSec Risk & Compliance Analyst

Southland Credit Union; Los Alamitos (CA); On-site; USD 110,000 - 140,000; Full time

Job summary

Southland Credit Union is seeking an IS Analyst to assess information security risks, evaluate controls, and translate regulatory requirements into practical guidance. You’ll partner with leadership to strengthen governance and compliance across the organization.

You’ll apply risk-based thinking to security programs, audits, and policy development, helping business teams implement pragmatic security controls while maintaining member trust.

Qualifications

• 4–6 years of experience in information security, cybersecurity, risk management, compliance, or IT audit.
• Demonstrated experience conducting information security risk assessments, evaluating security controls, interpreting regulatory requirements, and developing governance documentation.
• Experience advising management or business stakeholders on cybersecurity risks and recommendations.
• Experience with security control assessments, regulatory compliance activities, or internal/external audits is preferred.

Responsibilities

• Lead enterprise information security risk assessments by evaluating threats, vulnerabilities, business impact, likelihood, and residual risk.
• Assess security controls and critical business processes to determine how effectively they address risk and where improvements are needed.
• Translate risk into decisions and advise management on cybersecurity threats, risk treatment strategies, and control opportunities.
• Guide business teams on security requirements, policy expectations, and applicable controls in practice.

Skills

Information security

Risk assessment

Regulatory requirements

Governance

Security controls

Audits

Communication

Education

Bachelor's degree in Information Security

Tools

GRC platforms

Job description

Southland Credit Union is seeking an IS Analyst to assess information security risks, evaluate controls, and translate regulatory requirements into practical guidance. You’ll partner with leadership to strengthen governance and compliance across the organization.

You’ll apply risk-based thinking to security programs, audits, and policy development, helping business teams implement pragmatic security controls while maintaining member trust.