Senior GRC Analyst III (InfoSec & Compliance)

Ourlivesmadison; Madison, Northern (WI, KY); Hybrid; USD 90,000 - 140,000; Full time

Benefits offered by this job

Time off benefits

Caregiver leave

Parental leave

Volunteer time

Holidays

401k matching

Bonus opportunity

Health/Dental/Vision plans

Employee Assistance Program

Job summary

UW Credit Union is seeking an Information Security Governance, Risk and Compliance Analyst to safeguard member data by coordinating compliance with laws and standards, evaluating third-party risk, and supporting governance across security policy lifecycle.

The role emphasizes collaborating with legal, audit, and loss prevention teams, maintaining risk registers, and driving a mature information security program aligned with CIS, NIST, COBIT frameworks.

Qualifications

• Bachelor’s degree in Computer science or similar technology related field, or equivalent relevant work experience required (Master’s Degree preferred).
• 6-7 years of experience in one or more listed roles such as Cybersecurity GRC Manager, IT Security Officer or GRC Analyst.
• CISSP, CRISC, CISA, CGEIT or equivalent; GSEC/Sec+ or equivalent preferred.

Responsibilities

• Support compliance with laws, regulations, and industry standards.
• Develop and maintain information security policies and standards.
• Coordinate third-party risk assessments and onboarding processes.
• Facilitate IS steering and governance meetings; integrate security into business processes.

Skills

Security controls

NIST/COBIT frameworks

Regulatory awareness

Communication skills

Problem solving

Third-party risk

Policy development

Education

Bachelor’s in Computer Science or related field

Master’s degree preferred

CISSP/CRISC/CISA/GCEAIT or equivalent

Job description

UW Credit Union is seeking an Information Security Governance, Risk and Compliance Analyst to safeguard member data by coordinating compliance with laws and standards, evaluating third-party risk, and supporting governance across security policy lifecycle.

The role emphasizes collaborating with legal, audit, and loss prevention teams, maintaining risk registers, and driving a mature information security program aligned with CIS, NIST, COBIT frameworks.