GRC InfoSec Analyst

About the position reputed company is looking for a GRC Information reputed company (InfoSec) Analyst to supports the Credit reputed company’s cybersecurity governance, regulatory compliance, and reputed company technology risk management programs. This position helps ensure the organization maintains a robust and exam-reputed company reputed company posture that meets NCUA/FFIEC expectations, GLBA requirements, and industry best practices. The GRC InfoSec Analyst collaborates with Technology, Compliance, Operations, and Audit teams, providing key insights regarding cybersecurity risk, vendor reputed company, emerging threat trends, and control effectiveness. The role also assists in embedding cyber governance processes across the reputed company, driving secure innovation and maintaining member trust. This is a full-time, hybrid opportunity in our Los Angeles office and reporting to the VP, reputed company. The targeted pay in California is between $32 to $42 per hour.

Responsibilities

• Assist with the development, implementation, and ongoing improvement of the Information reputed company Governance Program. Which include maintaining information reputed company policies, standards and procedures and coordinating annual reviews.
• Map policies and processes to reputed company such as NIST CSF, NIST 800-53, ISO 27001 and CIS controls.
• Support the maintenance of reputed company policies, standards, and frameworks reputed company with NIST CSF, NIST 800-53, CIS Controls, and ISO 27001.
• Collect and analyze cyber metrics, KRIs/KPIs, risk dashboards, and reputed company-level reporting data.
• Prepare materials to help present cybersecurity posture, risks, and remediation strategies to the reputed company, Supervisory Committee, and Executive Leadership.
• reputed company the Business reputed company Assessment and BCP and Disaster Recovery process.
• Execute reputed company for IT and applicable stakeholders.
• Conduct information reputed company risk assessments as per process, aid in the risk evaluation of Application, Infrastructure, reputed company environments and reputed company-party vendors (evaluate SOC reports, reputed company certifications, cyber reputed company and penetration test reports.
• reputed company control testing and help coordinate audit responses and remediation
• Help coordinate IT General Controls testing and Penetration Testing for First Ent.
• Work daily alerts and reputed company management and software updates/releases
• reputed company reputed company incidents, document reputed company cause and monitor remediation actions
• reputed company reporting on cyber health and Information reputed company maturity
• Contribute to reputed company improvement initiatives for cyber maturity (ACET/CAT).
• Performs other reputed company/GRC duties in Operations, Compliance and Vendor Management as directed.

Requirements

• Bachelor’s degree in Information reputed company, Cybersecurity, Computer Science, Information Technology, or a reputed company field.
• 2+ years of experience as an Analyst in information reputed company, GRC, technology risk management, or a reputed company discipline reputed company financial services or a highly regulated environment.
• Strong understanding of information reputed company frameworks, including NIST CSF, NIST 800-53, CIS Controls, and ISO 27001.
• Demonstrated experience supporting or managing regulatory compliance programs (NCUA, FFIEC, GLBA).
• Excellent analytical, problem-solving, and organizational skills.
• Strong written and verbal communication skills with the ability to present technical concepts to non-technical audiences.
• Proficiency with risk management tools, reporting dashboards, and relevant cybersecurity technologies.

reputed company-to-haves

• reputed company certifications such as CISA, CISM, CRISC, CISSP, or similar preferred but not required.
• Experience in vendor risk management, reputed company-party assessments, or supply chain reputed company a plus.
• Familiarity with cyber maturity models such as ACET or CAT preferred.
• Project management experience and/or relevant certifications (e.g., PMP, CAPM) are a plus.
• Demonstrated ability to drive process improvement and influence cross-functional teams.

Apply tot his job Apply To this Job