Cybersecurity Analyst

Job Description

Job Description

Role:

As a Cybersecurity Analyst, you will protect the Credit Union's information assets, systems, and member data through proactive monitoring, risk management, incident response, security governance, and continuous improvement activities. The position supports cybersecurity operations, regulatory compliance, vendor risk management, and cyber resilience initiatives aligned with NIST Cybersecurity Framework (CSF), CIS Controls, FFIEC guidance, and NCUA expectations. The Cybersecurity Analyst partners with technology and business teams to integrate security into all business processes and technology solutions

Essential Functions & Responsibilities:

Monitor and investigate security events, alerts, and anomalous activity. Analyze threats using SIEM, EDR, NGAV, and threat intelligence sources. Participate in detection, containment, eradication, and recovery activities for cybersecurity incidents. Maintain cybersecurity playbooks and incident response procedures. Support cyber investigations and forensic evidence collection activities. Produce incident reports, dashboards, and security metrics.

Coordinate vulnerability identification, assessment, remediation, and validation processes. Assist in managing endpoint security technologies including EDR, NGAV, MDM, and hardening tools. Validate secure configurations for servers, workstations, cloud services, and network infrastructure. Administer and support cybersecurity platforms including Fortinet security products (FortiGate, FortiManager, FortiAnalyzer, FortiAuthenticator, FortiClient, and FortiEMS) to enhance network security, visibility, and threat detection capabilities. Support identity security initiatives including MFA, SSO, PAM, and privileged account governance. Assist with penetration testing activities and remediation of identified security vulnerabilities and assessment findings.

Assist in maintaining cybersecurity policies, standards, procedures, and guidelines. Support risk assessments and cybersecurity control reviews. Assist with NCUA examinations, internal audits, external audits, and regulatory reviews. Track corrective actions and remediation plans resulting from audits and assessments. Maintain cybersecurity documentation and evidence repositories

Participate in security reviews of vendors, fintech partners, and service providers. Review SOC reports, penetration testing reports, SIG questionnaires, and security attestations. Assist with third-party due diligence and ongoing monitoring activities. Identify and document vendor-related cybersecurity risks.

Support cybersecurity awareness and phishing simulation programs. Participate in incident response tabletop exercises. Assist with disaster recovery and business continuity testing activities. Research emerging threats and communicate relevant risks to management. Recommend improvements to strengthen the Credit Union's cybersecurity maturity.

Maintain effective detection and response capabilities for security incidents.

Performance Measurements:

1. To identify opportunities to improve services to the company and/or its customers through use of new products and technologies.
2. Support successful completion of internal audits, external audits, and NCUA examinations.
3. Improve cybersecurity maturity through measurable control enhancements.
4. Deliver accurate and timely reporting of cybersecurity metrics and risks.
5. Maintain positive relationships with internal departments, members, auditors, and vendors.
6. Contribute to cybersecurity awareness and employee engagement initiatives.

Knowledge and Skills

Experience: 3-5 years of cybersecurity, information security, or related IT experience. Financial services or credit union experience preferred. Experience working with security technologies and security operations processes.

Education: College degree in Computer Science, Information Security, Cyber Security, or equivalent.

Interpersonal Skills: Strong verbal and written communication skills are required. Must be able to build effective working relationships with employees, management, vendors, auditors, and regulators. Ability to communicate technical and cybersecurity-related concepts to both technical and non-technical audiences. Requires professionalism, sound judgment, discretion, and the ability to handle sensitive and confidential information.

Other Skills: SIEM platforms, Vulnerability Management Platforms, IAM/PAM Technologies, Email Security Solutions, Data Loss Prevention (DLP), Security Awareness Platforms, Security Automation & Orchestration (SOAR).