Senior InfoSec Engineer — 2LOD Risk & Assurance

Digital Federal Credit Union; Hillsboro (OR); Hybrid; USD 117,000 - 140,000; Full time

Benefits offered by this job

Traditionally medical, dental, and视觉

Generous 401(k) match

Paid Time Off: up to 15 days + 40 sick

Paid federal holidays

Employee lending product pricing

Job summary

Digital Federal Credit Union seeks an experienced 2nd Line of Defense risk analyst to oversee information security risk, controls, and technology posture. You’ll assess risks across environments, challenge first-line security decisions, and help strengthen cyber resilience for a financial services audience.

The role emphasizes governance of IAM, vulnerability management, cloud and data protection, with reporting to stakeholders and regulators. Hybrid work in MA or OR region expected.

Qualifications

• 4–6 years of information security risk experience.
• Knowledge of NIST CSF, NIST 800-53, ISO 27001, CIS Controls, FFIEC guidance.
• Experience with AI in security and cloud security governance.
• Ability to provide objective risk assessments and stakeholder communication.
• Experience with MCP governance.

Responsibilities

• Perform independent assessments of information security risks, controls, and processes across technology environments.
• Evaluate design and effectiveness of security controls against frameworks and regulatory requirements.
• Identify and communicate cybersecurity risks, vulnerabilities, and threats to stakeholders.
• Support governance of security domains including IAM, vulnerability, cloud, data protection, and security operations.
• Prepare reporting and presentations communicating risks and trends.

Skills

NIST CSF

ISO 27001

CIS Controls

Regulatory compliance

Azure

AWS

AI security tools

Education

Bachelor's degree in information security or related field

Tools

Orca

Prisma Access Cloud

Wiz

AIRS

CrowdStrike Falcon AI

Job description

Digital Federal Credit Union seeks an experienced 2nd Line of Defense risk analyst to oversee information security risk, controls, and technology posture. You’ll assess risks across environments, challenge first-line security decisions, and help strengthen cyber resilience for a financial services audience.

The role emphasizes governance of IAM, vulnerability management, cloud and data protection, with reporting to stakeholders and regulators. Hybrid work in MA or OR region expected.