IS Analyst

Southland Credit Union • Rossmoor, CA

1d • $79,000 - $95,000

About The Position

At Southland Credit Union, we believe People Helping People means creating a secure and trusted environment where our members can confidently achieve their financial well-being. Behind every great member experience is a strong commitment to protecting the information, systems, and services our members and associates rely on every day. As an Information Services Analyst, you'll play an important role in protecting that trust. You'll serve as a subject matter expert in information security, helping Southland evaluate cybersecurity risks, strengthen security controls, interpret regulatory requirements, and make informed decisions about how we protect the organization. Your recommendations will help leadership understand risk, prioritize action, and support the Credit Union's business goals while maintaining a strong security and compliance foundation. This opportunity is a great fit for someone who enjoys analyzing complex security and regulatory issues, solving problems, and turning technical information into practical recommendations. If you enjoy working independently while collaborating with teams across an organization—and want your expertise to influence meaningful security decisions—we'd love to hear from you.

Requirements

• 4–6 years of experience in information security, cybersecurity, risk management, compliance, or IT audit.
• Demonstrated experience conducting information security risk assessments, evaluating security controls, interpreting regulatory requirements, and developing governance documentation.
• Experience advising management or business stakeholders on cybersecurity risks and recommendations.
• Working knowledge of security tools and technologies.
• Strong analytical thinking and structured problem-solving skills.
• Ability to assess risk, evaluate business impact, and make sound recommendations using independent judgment.
• Knowledge of information security governance, risk management, compliance, and cybersecurity practices.
• Ability to interpret complex regulatory requirements and security frameworks and translate them into practical guidance.
• Strong written and verbal communication skills, including the ability to explain technical concepts to non-technical stakeholders.
• Ability to work effectively both independently and collaboratively with individuals at all levels of the organization.
• Strong organization, attention to detail, and ability to manage competing priorities.
• Sound judgment, discretion, accountability, and a commitment to ethical decision-making.
• Proficiency with standard office technology and systems.

Nice To Haves

• Experience with security control assessments, regulatory compliance activities, or internal/external audits is preferred.
• Professional certification such as CISSP, CISA, CISM, or equivalent.
• Experience working in a regulatory environment.
• Experience with Governance, Risk, and Compliance (GRC) platforms.
• Experience supporting financial services, credit unions, or similarly regulated organizations.

Responsibilities

• Evaluate information security controls and critical business processes to identify risks, determine effectiveness, and recommend meaningful improvements.
• Lead enterprise information security risk assessments by analyzing threats, vulnerabilities, business impact, likelihood, and residual risk.
• Interpret regulatory requirements and recognized security frameworks, including NCUA, GLBA, NIST, and ISO 27001, and translate them into practical security and compliance recommendations.
• Develop and maintain information security policies, standards, procedures, and governance documentation that strengthen the organization's security program.
• Guide business teams on security requirements, policy expectations, risk considerations, and appropriate control strategies.
• Support internal and external audits by evaluating evidence, developing responses, explaining security controls, and helping prioritize remediation efforts.
• Analyze security events and vulnerability assessment results to determine business impact, risk exposure, and appropriate response or remediation priorities.
• Advise management on cybersecurity threats, security exceptions, risk treatment strategies, and opportunities to strengthen the organization's security posture.
• Lead or contribute as a subject matter expert on strategic security initiatives and enterprise improvement projects.
• Identify opportunities to strengthen governance, improve processes, increase security maturity, and use automation to support security and compliance goals.

Benefits

• Your work will have an impact that goes far beyond information security. By helping Southland identify risks, strengthen controls, and make thoughtful security decisions, you'll help protect the information and services our members depend on—and support the trust that makes People Helping People possible.
• You'll also have the opportunity to make your expertise visible across the organization. From advising leadership and supporting audits to contributing to strategic security initiatives and identifying opportunities for improvement, you'll work with different teams and have a meaningful voice in how Southland continues to strengthen its security program.
• If you're looking for a role where your judgment matters, your ideas can influence meaningful decisions, and your work contributes to both organizational success and member trust, this could be the opportunity you've been looking for.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level