Senior Information Security Analyst

Heritage Family Credit Union; Rutland (VT); On-site; USD 63,000 - 80,000; Full time

Job summary

Heritage Family Credit Union, a member-centric organization, is seeking a Senior Information Security Analyst to oversee the protection of information assets. This role involves implementing best practices in security, managing risks, and ensuring compliance within a dynamic and collaborative IT environment.

Benefits

Paid time off and federal holidays

Comprehensive medical, dental, and vision benefits

401k match & additional discretionary contribution

Opportunities for growth and ongoing learning

Gym membership reimbursement

8 hours of volunteer time

Qualifications

• 3 to 5 years of experience in Information Security or Cybersecurity.
• CISSP or CISA certifications preferred.
• Strong knowledge of IT systems and emerging technologies.

Responsibilities

• Develop and maintain Access Control Program.
• Monitor and respond to security alerts.
• Support vulnerability management across environments.

Skills

Information security principles

Cybersecurity practices

Risk management strategies

Problem-solving

Communication skills

Education

Bachelor degree in information technology

Tools

Microsoft Active Directory

Azure Virtual Desktop

Office365

Job description

Join to apply for the Senior Information Security Analyst role at Heritage Family Credit Union

Join to apply for the Senior Information Security Analyst role at Heritage Family Credit Union

Get AI-powered advice on this job and more exclusive features.

Why Join Us:

Heritage Family Credit Union is a dynamic and member-centric organization committed to making a positive impact on the lives of our members. We believe in delivering not just financial services, but fostering meaningful relationships that enhance the overall well-being of our members and communities. With a focus on education, integrity, and community, we strive to be the preferred financial partner.

Job Details

Description

Why Join Us:

Heritage Family Credit Union is a dynamic and member-centric organization committed to making a positive impact on the lives of our members. We believe in delivering not just financial services, but fostering meaningful relationships that enhance the overall well-being of our members and communities. With a focus on education, integrity, and community, we strive to be the preferred financial partner.

We're Seeking a Senior Information Security Analyst Who Can

• Thrive in a fast-paced, collaborative environment as part of a growing team
• Contribute across all areas of IT, with a primary focus on information security
• Apply industry best practices and sound judgment in testing, implementing, and maintain secure systems and processes
  
  

Salary Range: $63,789.20-$79,736.50

Position Title: Senior Information Security Analyst

FLSA Status: Exempt

Department: Information Technology

EEO Code: Professional

Reports To: SVP, Information Technology

Grade: 11

Benefits Include

• Paid time off in addition to paid federal holidays
• Comprehensive medical, dental, and vision benefits starting first of the month following hire date for employees who regularly work 24+ hours a week
• Health Savings Account with discretionary quarterly employer contributions
• 401k match & additional discretionary contribution
• Opportunities for growth and ongoing learning
• 8 hours of volunteer time with an organization important to you
• Reimbursement each month for Gym membership (up to $25), hobby reimbursement (up to $25) and fresh local foods (up to $25 on a seasonal basis)
  
  

Summary

The Information Security Analyst provides oversight to protect the information assets of Heritage Family Credit Union (HFCU) both on-premise and in the cloud. They support the information technology (IT) governance policies and processes, compliance, information security, change control and business continuity plans of HFCU.

The Senior Information Security Analyst will be part of a growing team in a fast-paced environment that participates in all areas of IT with a focus on information security. They will use their knowledge of industry best practices, policies, and good judgement in testing, implementing and operating secure practices, in support of regulatory and compliance information security requirements. This analyst will work with business partners and service providers to institutionalize a solid security and overall IT governance framework.

Essential Functions

• Access Control Governance & Program Leadership: develop and maintain the credit union’s Access Control Program, ensuring secure, role-based access to systems and data. Lead the Access Governance Committee responsible for reviewing and approving access permissions based on job responsibilities, and ensure alignment with regulatory standards and internal policies.
• Security Monitoring, Incident Response & Risk Management: Monitor, investigate, and respond to alerts from security tools (e.g., SIEM, SOC, firewall). Serve on the Cybersecurity Incident Response Team (CIRT), assist in breach investigations, perform root cause analysis, and support the development and testing of the Incident Response and Business Continuity Plans. Conduct regular risk assessments and application security evaluations using automated tools, questionnaires, and penetration testing results.
• Vulnerability Management & Remediation: Support the vulnerability management program by identifying, prioritizing, and remediating security exposures across on-premise and cloud environments. Communicate findings to stakeholders, guide remediation efforts, and ensure ongoing compliance with internal security standards and regulatory expectations.
• Security Architecture, Policy Development & Compliance: Assist in the design and implementation of a comprehensive security architecture that supports business objectives and complies with industry best practices. Develop and maintain security policies, procedures, and documentation. Collaborate with departments and vendors to ensure controls are properly implemented and security risks are mitigated during projects and daily operations.
• Awareness, Training & Technical Support: Support the organization’s security awareness initiatives by helping develop training materials and responding to phishing reports. Provide technical assistance to end users regarding software, hardware, and access issues. Ensure that user access changes are securely managed and properly documented through help desk systems.
  
  

Qualifications

• Education:
• Bachelor degree in information technology, information security or related field required.
• Experience:
• 3 years to 5 years of similar or related experience with an emphasis on Information Security and or Cybersecurity required.
• Certified Information Systems Security Professional (CISSP) or Certified Information Systems Auditor (CISA) certifications or other applicable certification preferred.
• Proficiency with Microsoft Active Directory, Azure Virtual Desktop, Entre ID, Office365, Group Policy, vulnerability assessment, prioritization and remediation required.
• Skills:
• Strong knowledge of cybersecurity principles and practices including FFIEC guidelines.
• In-depth knowledge of IT systems, infrastructure, and emerging technologies.
• Strong understanding of risk management and mitigation strategies.
• Strategic thinker with the ability to translate technology trends into business opportunities.
• Excellent problem-solving, critical thinking and decision-making skills.
• Must possess strong organization, communication, and business writing skills that exhibit professionalism and the ability to deal effectively with internal and external contacts is a must.
  
  

Physical Requirements

• This position requires sitting for long periods of time and working primarily at a workstation or desk in an office environment.
• Daily tasks include extensive use of a computer performing standard keyboard functions, requiring repeated motion, as well as extensive use of the phone.
  
  

Work Environment

• Professional banking environment.
  
  

BSA/Risk: Employees will ensure adherence to BSA (Bank Secrecy Act) and risk compliance standards in all job responsibilities, maintaining the organization's regulatory integrity and mitigating potential risks.

Equal Opportunity Employer: Heritage Family Credit Union is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

Referrals increase your chances of interviewing at Heritage Family Credit Union by 2x

Sign in to set job alerts for “Senior Information Security Analyst” roles.

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.