Cybersecurity Analyst

Heritage Federal Credit Union•Newburgh, IN

About The Position

Heritage Federal Credit Union is seeking a Cybersecurity Analyst to join their growing team. This role, reporting to the SVP Enterprise Risk Management & Information Security Officer (SVPERMISO), involves supporting information security, incident response, user access review, business continuity, and vendor management programs to ensure regulatory compliance. The analyst will conduct investigations, analyze data, monitor cybersecurity metrics, alerts, and logs, and report on security controls. Responsibilities also include assisting with risk assessments, developing awareness training, and enforcing security policies and compliance measures. The position requires maintaining security data flow diagrams and awareness of how security systems impact the credit union's security posture.

Requirements

Associate degree in cybersecurity or similar area with two years of relevant work experience in related field or at least four years of direct relevant experience
Relevant work experience should come from at least two of the following domains: Security and Risk Management, Security Architecture and Engineering, Communication and Network Security, Identity and Access Management, Security Assessment and Testing, or Security Operations
Intermediate experience with SIEM, endpoint security, and log analysis.
Foundational knowledge of networking, operating systems, and security concepts.
Intermediate knowledge of FFIEC, GLBA, and NIST CSF requirements.
Strong documentation and communication skills
Exposure to cloud security monitoring and applications/software
Prior experience working in a regulated financial services environment
Strong analytical, problem solving, and critical thinking skills
Attention to detail
Ability to maintain confidentiality

Responsibilities

Independently investigate alerts and security incidents, perform root cause analysis, and recommend corrective actions to SVPERMISO.
Support containment and recovery activities during security incidents.
Tune SIEM and endpoint detection tools to improve effectiveness and reduce false positives.
Support risk assessments, controls testing, and regulatory exams; Maintain logs and documentation for audits and NCUA exams.
Assist in security audits and risk assessments to identify weaknesses and recommend fixes; review vulnerability reports and prioritize remediation in collaboration with IT and business stakeholders.
Monitor threat intelligence and assess relevance to the credit union’s environment; Research new threats, vulnerabilities, and mitigation techniques to stay proactive.
Assist in the production of incident reports, management metrics, and executive summaries for management and regulators.
Participate in tabletop exercises and incident response testing.
Monitor security tools (i.e. SIEM, IDS/IPS, EDR) and perform initial alert triage following documented procedures.
Escalate potential incidents and suspicious activity with clear documentation and timelines to SVPERMISO.
Assist with incident response activities, including evidence gathering and post-incident reporting.
Assist in the development and implementation of security awareness and required compliance training.
Review user access rights and permissions based on least privilege.
Support the credit union in adherence to financial regulations and internal policies related to information security and cybersecurity.
Participate in disaster recovery and business continuity planning.
Maintain awareness of how security systems affect the credit union’s security posture, exposure, and production environment.
Maintain security related data flow diagrams for the credit union.