First Financial Credit Union-posted 3 months ago
Full-time • Mid Level
Los Ranchos De Albuquerque, NM
101-250 employees
Credit Intermediation and Related Activities

The Information Assurance Analyst analyzes supporting documentation to validate general computer, automated, and operational controls are working as intended and adhere to FFCU's information security policies, procedures, and controls. The Information Assurance Analyst works closely with internal teams to review security practices, detect potential threats, and provide recommendations for improving the overall security posture of the organization. This role involves assessing security risks, performing audits, and identifying vulnerabilities in systems and processes to ensure compliance with industry regulations and internal security standards. This individual serves as the Internal Audit teams' subject matter expert (SME) in identifying technology and cybersecurity risks. The role requires attention to detail, strong analytical skills, and a deep understanding of cybersecurity frameworks, standards, and best practices.

  • Plan, lead, and execute audits of information security controls associated with FFCU applications and systems on behalf of the Internal Audit and Information Security departments.
  • Conduct periodic operational security reviews to ensure that critical controls are operating as intended.
  • Maintain Information Security Control Documentation and Artifacts library.
  • Monitor information security events for unauthorized or unusual activity and respond or escalate as required.
  • Monitor compliance of FFCU configuration and change control management processes.
  • Ensure that appropriate information security reviews are completed and that information systems or services are authorized prior to being promoted to production.
  • Bachelor's degree in related technical or business area.
  • Minimum of 5 years experience in a related Information Technology, Information Security, or audit function.
  • Certifications such as a CISA, CISM, or CISSP are desirable.
  • Good working knowledge and understanding of the technologies and concepts supporting the essential functions of the position.
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service