InfoSec Risk & Compliance Specialist

Wright-Patt Credit Union Inc.; Beavercreek (OH); On-site; USD 90,000 - 120,000; Full time

Job summary

Wright-Patt Credit Union is seeking an Information Security Risk & Compliance Analyst to support the Information Security Risk program and the Third-Party Risk Management (TPRM) program in Beavercreek, OH. You will perform vendor due diligence, assess technology risks, and collaborate with Legal and IT to align contracts and controls with risk findings.

You will help document findings, manage risk through issue tracking, and contribute to building a robust control library.

Qualifications

• Experience conducting risk assessments for vendors and technologies.
• Ability to evaluate third-party risks and understand SLAs, data residency and data breach implications.
• Familiarity with industry frameworks (NIST, MITRE, CIS, OWASP) and risk management processes.

Responsibilities

• Evaluate technology and cybersecurity risks from new and existing vendors, disaster recovery, or business continuity.
• Collaborate with Legal to ensure contract terms align with due diligence and risk requirements.
• Document findings, residual risks, and recommendations in TRPM tools and Issue Management platform.
• Develop risk assessments for emerging tech (e.g., AI) and maintain control libraries and policies.

Skills

Vendor risk mgmt

Risk assessment

Policy & procedures

Issue tracking

Tools

TPRM tools

Job description

Wright-Patt Credit Union is seeking an Information Security Risk & Compliance Analyst to support the Information Security Risk program and the Third-Party Risk Management (TPRM) program in Beavercreek, OH. You will perform vendor due diligence, assess technology risks, and collaborate with Legal and IT to align contracts and controls with risk findings.

You will help document findings, manage risk through issue tracking, and contribute to building a robust control library.