IT Security Governance Intermediate

Description

The IT Security Governance Analyst supports MACU’s IT Security program by participating in established processes used to demonstrate effective management of IT Security risks. The role will work with multiple teams and multiple disciplines to report on key activities and details discrepancies that require further action. Excellent written and oral communication are key to accurately capture and describe IT security effectiveness. The Analyst will work within a defined project management style and is accountable for deadlines and escalate issues appropriately to management.

LOCATION

Mountain America Center - Hybrid:

9800 S Monroe St
Sandy, UT 84070

SCHEDULE

Full Time

To be effective, an individual must be able to perform each job duty successfully.

Understands established standards and uses established processes in multiple types of technology (vulnerability management, network security, privacy, etc.)
Can understand cybersecurity frameworks and describe how controls are effective in supporting key security principles (eg. Confidentiality, integrity, availability.)
Escalates exceptions to existing standards identified through established process and procedures to accurately report on risks in IT security landscape.
Participates in processes to test of IT Security controls and gathers artifacts in accordance with established stakeholders.
Uses established process in IT Security Governance to support stakeholders in with Risk and Internal Audit teams and work to provide needed support.
Collects evidence and ensures accuracy of reports and other artifacts.
Able to participate across teams and present to various stakeholders and team members in technical and non-technical contexts.
Understanding of enterprise IT systems and environments (e.g., on-prem, SaaS, third-party management.)
Continually improves professionally by reviewing webinars, pursuing industry certifications, and participate in professional organizations and conferences.
Perform other duties as assigned.

KNOWLEDGE, SKILLS, & ABILITIES

The requirements listed are representative of the knowledge, skills, and/or abilities required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential job functions.

Experience

3 years related experience in cybersecurity: auditing, risk, or engineering.
Demonstrated ability to participate in projects by being accountable for tasks and reporting of progress.
Demonstrated ability to understand cybersecurity frameworks and associated industry best practice inside a regulatory environment.
Demonstrated ability to understand and describe needed artifacts of established security testing.
Demonstrated ability to understand standards and policies with risk-based approach to cybersecurity: analyzing, prioritizing, and remediating.
Demonstrated ability to understand learning topics relevant to the credit union’s threat landscape and presented to team members.
Demonstrated ability to understand purpose of compensating controls in some areas of technology.
Demonstrated ability to understand IT KPIs and KRIs and how they demonstrate specific cybersecurity control effectiveness.
Demonstrated ability to understand and describe 3rd party cybersecurity risk.
Credit Union or banking compliance experience is a plus.

Education

Four-year college degree or equivalent experience in IT Technology.

Licenses, Certificates, Registrations

Intermediate to advanced IT Security/Audit/Risk Certifications from recognized security body (e.g., ISC2 CGRC, CISA, CISSP);

Computer/Office Equipment Skills

Skills in Microsoft Office including Outlook, Word, and Excel

Managerial Responsibility

N/A

Language Skills

Demonstrated ability to clearly express ideas, methodology, results and recommendations verbally, in writing and through insightful reports and graphic illustrations regarding business and technology needs.
Demonstrated ability to document outcomes and present information in a manner appropriate for key stakeholders and all levels of the organization.

Other Skills and Abilities

Able to be accountable for tasks inside of IT Security projects.
Collaborates with team members in established processes.
Assists team members with tasks and provides assistance as needed.
Participates in interviewing efforts.

Living the MACU IT Way including:

Critical thinking, curious, inquisitive, innovative, lifelong learner, driven towards quality, highly organized, being a problem solver, maintaining a positive attitude,
Reliable in your commitments, having a “can do” attitude, putting the team’s and the credit union’s goals first, being a self-starter, working autonomously and collaboratively in a fast-paced environment,
Simplify and automate processes, vigilantly focused on security, reliability, and redundancy in our systems,
Approachable and flexible, adaptive to change, holding yourself accountable to meet deadlines, contributing to the team’s success, collaborating with our team and others’ teams, and owning your responsibilities.

PHYSICAL ABILITIES / WORKING CONDITIONS

Physical Demands

Ability to sit, talk and hear consistently

Ability to stand, walk, and use hands to handle or reach occasionally

Vision Requirements

Close vision (clear vision at 20 inches or less)

Distance vision (clear vision at 20 feet or more)

Weight Lifted or Force Exerted

Ability to lift up to 10 pounds occasionally

Environmental

There are no unusual environmental factors (such as a typical office)

Noise Environment