IT Security Analyst

Job Title & Location Position: IT Security Analyst II Work Environment: Remote (MST) – Rapid City, SD 57702 Remote Eligible States: South Dakota, Montana, Wyoming, Florida, Georgia, Iowa, Utah, Kansas, Nebraska, Texas, Minnesota Overview Black Hills Federal Credit Union (BHFCU) is committed to improving the lives of its members and encourages staff to grow within the organization. This position supports the Credit Union’s information security governance, risk, and compliance programs through policy administration, audit coordination, risk tracking, vendor oversight, security reporting, and operational support activities. Essential Duties/Responsibilities Support the Credit Union’s Information Security Governance, Risk, and Compliance (GRC) program in alignment with FFIEC, NCUA, GLBA, NIST CSF, and CIS Controls. Assist with the development, review, maintenance, and administration of Information Security policies, standards, and procedures. Coordinate Information Security risk assessments, remediation tracking, exception management, and control validation activities. Support internal and external audits, regulatory examinations, and compliance reviews through evidence collection and documentation management. Prepare recurring security metrics, dashboards, reports, and board reporting materials. Support governance activities related to incident response, business continuity, disaster recovery, and change management. Assist with monitoring regulatory changes and assist with compliance impact assessments and remediation coordination. Support security awareness training initiatives, phishing campaigns, and training completion tracking. Maintain Information Security documentation, audit artifacts, governance records, and operational repositories. Track audit findings, remediation activities, risk items, and security-related tasks to completion as directed by the IT Security manager. Support administration of GRC platforms, workflow systems, and security request tracking processes. Coordinate appropriate access review activities, documentation management, and security governance workflows with the IT Security Manager. Maintain vendor management records, asset inventories, and security operational tracking documentation. Assist with incident response tabletop exercises, reporting coordination, and documentation updates. Support recurring operational reporting, committee materials, and executive reporting preparation. Other Duties/Responsibilities Participate in continuous improvement efforts for the Information Security Program. Collaborate with Information Technology, Compliance, Risk Management, Internal Audit, and business units on security initiatives. Support strategic Information Security projects and governance initiatives. Stay informed on evolving cybersecurity threats, regulatory requirements, and financial industry security practices. Attend professional development and security training as required. Qualifications Job Knowledge: Working knowledge of Information Security governance, risk management, and compliance frameworks including FFIEC, NCUA, GLBA, NIST CSF, CIS Controls, and PCI‑DSS; familiarity with third‑party/vendor risk management, security awareness training, business continuity, and incident response coordination; familiarity with governance, reporting, and workflow management tools such as Microsoft Office, ServiceNow, Tandem, or similar. Job Skills: Familiarity in using and managing SIEM tools, endpoint protection platforms, and cloud security technologies; strong analytical and problem‑solving skills; excellent written and verbal communication skills for technical and non‑technical audiences. Job Ability: Prioritize tasks and manage time effectively in a fast‑paced environment; perform detailed analyses of security incidents and recommend appropriate solutions; collaborate with technical and non‑technical teams; produce high‑quality, accurate work under pressure; stay ahead of rapidly evolving cybersecurity trends; use various IT security tools and devices in a dynamic environment. Education & Experience: Four‑year college level of language, math, and reasoning skills or pursuing a degree in computer security or a related field; 2+ years of relevant IT experience (enterprise risk management, red team/incident responder, or other relevant experience). Certifications preferred: None. Working Conditions Material and Equipment: Personal Computer, Webex, Slack, Tablet and Mobile Devices, Projectors and Screens, Microsoft Office, IT Security Specific Software, Various Other Software Applications. Physical Activities: Occasional travel to branch locations or community events; flexible hours, on‑call rotations, and extended hours as required. Physical Requirements: Sedentary with occasional lifting up to 5 lbs; ability to climb/descend stairs; routine computer work 6‑8 hours per day; capacity to work extended hours when necessary. Notice This job description is not intended to be, nor should it be construed as, a contract or guarantee of employment. Black Hills Federal Credit Union adheres to all federal and state labor laws regarding termination and probationary periods. This position is also subject to all personnel policies of Black Hills Federal Credit Union. Changes may be made to this job description at any time by the President. Black Hills Federal Credit Union is an equal‑opportunity employer. All applicants will receive consideration without regard to age, race, color, sex, sexual orientation, genetic information, religion, national origin, disability, veteran status, or any other status or condition protected by state or federal law. BHFCU will provide reasonable accommodation to qualified persons with a disability who are otherwise able to perform the essential functions of the job. #J-18808-Ljbffr