Governance, Risk and Compliance (GRC) Security Analyst - HYBRID

First City Credit Union•Altadena, CA

1d•Hybrid

About The Position

The Governance, Risk and Compliance (GRC) Security Analyst will assume, but not be limited to, the following responsibilities: Performs security assessments to determine effectiveness of implemented security controls. Assesses the security posture of systems throughout their life cycle. Leads management on risks and actions to monitor, remediate & report via the risk register. Assists with third party and supplier risk management programs and assessments. Assists in the analysis, controls, and management of risk assessments for the BSA/AML program, Identity Theft & Red Flags and other risk assessments as Assists with outside audit and certification activities including management of security questionnaires. Designs and conducts training for computer security education and awareness programs. Work effectively with IT vendors and managed services partners.

Requirements

B.S. or equivalent in Computer Science, Information Science & Technology, or related field.
3+ years of experience in governance, risk, compliance, audit or information security within a regulated financial services environment.
Experience in GLBA and Credit Union Compliance
Working knowledge of NIST SP 800 series, ISO/IEC 27000 series, and similar standards.
Excellent verbal and written communication skills.
Excellent oral, written and interpersonal skills with the ability to influence and work effectively with diverse groups of peers and business partners
Detail oriented with a demonstrated ability to work on multiple tasks simultaneously with strong organizational and prioritization skills

Nice To Haves

CISSP, CISA,or CISM preferred.
Other information security certifications highly desired.

Responsibilities

Performs security assessments to determine effectiveness of implemented security controls.
Assesses the security posture of systems throughout their life cycle.
Leads management on risks and actions to monitor, remediate & report via the risk register.
Assists with third party and supplier risk management programs and assessments.
Assists in the analysis, controls, and management of risk assessments for the BSA/AML program, Identity Theft & Red Flags and other risk assessments as
Assists with outside audit and certification activities including management of security questionnaires.
Designs and conducts training for computer security education and awareness programs.
Work effectively with IT vendors and managed services partners.