Third-Party Risk & Senior InfoSec Analyst

Third-Party Risk & Senior InfoSec Analyst 2355 W Pinnacle Peak Rd, Phoenix, AZ 85027 At OneAZ Credit Union, our success is measured only by yours. We’re here to create lasting change in the lives of our members, our communities, and our team. If you're looking for a career with purpose, where your work truly matters—you've found it! You’re impactful, compassionate, and fearless, ready to embrace new challenges and shape the future of financial well‑being. You take accountability for our success and thrive in an environment where curiosity is celebrated. If this sounds like you, let’s build something great together. Essential Functions Perform risk-based due diligence and ongoing monitoring of third‑party vendors Review and analyze security questionnaires Review and analyze SOC 1 / SOC 2 reports Review and analyze business continuity and disaster recovery documentation Document vendor risk assessments and identify control gaps Drive remediation efforts and follow up with business owners and vendors Maintain vendor risk inventory and supporting documentation Assist in preparing reports for management and regulatory exams Escalate overdue remediation items and unresolved control gaps Support coordination of incident response activities (cybersecurity and security/operational incidents) Track incidents from identification through resolution Manage incident documentation, evidence tracking, and record maintenance Assist in post‑incident reviews, including root cause analysis and lessons learned Support development and maintenance of incident response procedures and playbooks Participate in incident response testing and tabletop exercises Compile and maintain reporting on vendor risk assessments and outstanding issues Compile and maintain reporting on incident trends and metrics Coordinate with IT and compliance teams to ensure timely execution of security operational requirements Ensure documentation is complete, organized, and audit‑ready Identify and deliver security training programs to employees, promoting best practices and enhancing the organization’s security posture Review penetration testing and security. Perform ongoing analysis of security systems logs and intrusion detection tools/procedures Monitor changes in the security industry including new vulnerabilities, viruses, intrusions, fraud schemes, and best practices and tools available for system/network protection. Recommend appropriate technical changes to maintain designated security protection levels What You Bring High School Diploma or GED Required Bachelor’s Degree in Business, Information Security, Risk Management, or related field (or equivalent experience) 3-5 years similar or related experience in one or more areas: Vendor/Third‑Party Risk Management, Information Security or IT Risk, Incident Management or Incident Response Understanding of vendor risk management and due diligence practices Familiarity with SOC reports and basic control frameworks Working knowledge of incident response lifecycle and documentation Strong attention to detail and documentation discipline Ability to manage multiple priorities and meet deadlines Effective written and verbal communication skills Demonstrated ability to independently manage operational security tasks and drive follow‑through across stakeholders Strong written and verbal communication with consistent escalation and status reporting discipline Generous paid time off: paid holidays, floating holidays, personal days, vacation days, plus sick time Low‑cost Medical, Dental & Vision plans Target hiring range $84,149.19 – $105,186.49 (depending on experience and prior to any incentives this position is eligible for) Benefits Generous paid time off: paid holidays, floating holidays, personal days, vacation days, and sick time Low‑cost Medical, Dental & Vision plans Compensation Target hiring range $84,149.19 – $105,186.49 (depending on experience and prior to any incentives this position is eligible for) Equal Employment Opportunity All candidates will be considered for this position on an individualized basis, in compliance with all applicable equal employment opportunity laws. We do not discriminate on the basis of any protected group status under any applicable law. #J-18808-Ljbffr OneAZ Credit Union