Senior Information Security Risk & Controls Engineer

Digital Federal Credit Union; Marlborough (MA); Hybrid; USD 117,000 - 140,000; Full time

Benefits offered by this job

Medical/Dental/Vision

401(k) match

Paid time off

Paid holidays

Employee lending discounts

Job summary

First Tech Federal Credit Union is seeking a Second Line of Defense risk professional to oversee information security program risk across technology, cloud, and data protection. You will assess controls, communicate findings, and foster risk-aware decisions with stakeholders in a hybrid setup.

Responsibilities include risk assessments for new tech, governance of security domains, and reporting on risks and trends to leadership.

Qualifications

• Bachelor's degree in a field related to the role or 4 extra years of relevant experience.
• 4–6 years of information security experience.
• Knowledge of NIST CSF, NIST 800-53, ISO 27001, CIS Controls, FFIEC guidance.
• Understanding of cloud, AI, network security, and data protection.
• Ability to provide safe usage guidance for AI in finance.
• Experience with MCP governance.
• Familiar with Microsoft Copilot, OpenAI tools and similar tech.
• Experience with Azure and AWS security controls.
• Experience with cloud security tooling (Orca, Prisma Access, Wiz).
• Strong analytical and problem-solving skills.
• Effective risk communication to business stakeholders.
• Shift-left security mindset across development lifecycles.

Responsibilities

• Perform independent assessments of information security risks, controls, and processes.
• Evaluate design and effectiveness of security controls against frameworks and requirements.
• Identify, analyze, and communicate cybersecurity risks to stakeholders.
• Support governance of security domains including IAM, vulnerability, cloud, data protection.
• Conduct risk assessments for new technologies and initiatives.
• Provide challenge to risk decisions and remediation strategies.
• Monitor KRIs, control effectiveness, and security trends.
• Develop and maintain risk management policies and governance processes.
• Participate in regulatory examinations and internal audits with documentation.
• Collaborate with Technology, Compliance, Risk, Internal Audit and business units.
• Prepare reporting and presentations on technical risks and gaps.
• Oversee third-party technology providers and vendor risk activities.
• Stay current on cybersecurity threats and regulatory developments.

Skills

Information security

Risk assessment

NIST CSF / 800-53

Cloud security

AI security governance

Regulatory compliance

MCP governance

Azure & AWS

Communication

Stakeholder mgmt

Education

Bachelor's degree or 4 years experience

Job description

First Tech Federal Credit Union is seeking a Second Line of Defense risk professional to oversee information security program risk across technology, cloud, and data protection. You will assess controls, communicate findings, and foster risk-aware decisions with stakeholders in a hybrid setup.

Responsibilities include risk assessments for new tech, governance of security domains, and reporting on risks and trends to leadership.