Information Security Analyst II (GRC)

About the role

Information Security Analyst II (GRC) at Meritrust Credit Union, reporting to the AVP Security Analysis. Executes the GRC program: policies and controls, risk reviews, control testing, audit and exam evidence, exceptions, KRIs, security training. Requires 0-2 years of IT or cybersecurity experience; onsite Monday-Friday.

Requirements

• Associate's or Bachelor's degree in Computer Science, IT, Cybersecurity or related field, or equivalent experience
• 0 to 2 years of experience in IT, cybersecurity or a related technical role
• Basic understanding of information security concepts
• Familiarity with PCI DSS, NIST, CIS, OWASP
• Basic knowledge of Microsoft Windows desktop and server environments
• Introductory knowledge of Linux
• Fundamental understanding of networking concepts and protocols
• Entry-level security certifications such as Security+ or SSCP preferred or willingness to obtain
• Exposure to regulated environments (financial services preferred) a plus

What you'll do

• Execute the GRC program within the Information Security team
• Develop and maintain security policies, standards and procedures
• Perform risk assessments and document mitigation recommendations
• Support ISIRP, BC/DR plans and tabletop exercises
• Assist with internal and external audits and regulatory examinations
• Conduct regular testing of controls in security policies
• Track audit and risk findings through remediation
• Manage the exceptions and risk acceptance process
• Design InfoSec metrics and KRIs and report to leadership
• Monitor phishing reports and InfoSec tickets

Where this was posted

• Hiring Cafe

  last seen 2h ago
  View on Hiring Cafe