Information Security Analyst at NIH Federal Credit Union

Rockville, Maryland, United States -

Full Time

Start Date

Immediate

Expiry Date

09 Jul, 26

Salary

100000.0

Posted On

11 Apr, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Vulnerability management, Patch management, Security monitoring, Incident response, SIEM, Firewall management, Risk assessment, Audit support, Regulatory compliance, Endpoint protection, Technical documentation, Security controls, Data protection, Network security, Information security

Industry

Banking

Description

Description *This position will have a flexible hybrid work schedule. In office presence at our HQ in Rockville is required 3-4 times a week. We are looking for more than just an employee, we are looking for a true team member dedicated to enhancing the member experience! Come join the credit union movement and Discover Banking With Heart at NIHFCU! At NIHFCU, one of our core values is investing in our employees, which is why we offer perks like these: • Benefit Package for all Full time employees includes health, dental, vision, Life • insurance benefits • 401(K) and profit sharing • Tuition Reimbursement • Career Advancement and development • Credit Union Membership with discounted services and products Learn how our NIHFCU team thrives—not only in making a difference for the members they serve, but for themselves! Want to know more about NIHFCU’s “Banking with Heart” career opportunities? #NIHFCUCareers #BestCreditUnions: https://www.nihfcu.org/about/careers/ GENERAL SUMMARY The Information Security Analyst is a hands-on role responsible for the day-to-day operation and support of the Credit Union’s Information Security Program. This position focuses on operational security activities such as vulnerability and patch management, security monitoring and alert response, and coordination of audit, examination, and penetration test remediation. While the role reports to the IT Network Manager, it works closely on a day-to-day basis with the Credit Union’s virtual CISO (vCISO) and supporting security team, as well as internal IT staff - particularly the Network team - to help ensure the confidentiality, integrity, and availability of member and organizational information systems in a regulated financial services environment. MAJOR DUTIES AND RESPONSIBILITIES Monitor security tools, logs, and reports (e.g., endpoint protection, vulnerability scanners, SIEM, firewall logs) to identify, investigate, and respond to alerts, anomalies, and potential security incidents. Perform initial triage, analysis, and documentation of security events; escalate incidents in accordance with the Incident Response Plan and established procedures. Coordinate and support ongoing vulnerability scanning activities, including internal, external, and authenticated scans. Review vulnerability scan results, validate findings, prioritize risk, and implement or coordinate remediation activities to completion in accordance with established standards and change management procedures. Execute and support patch management activities by reviewing patching reports, identifying gaps, and applying or coordinating remediation, and validating the timely remediation of security vulnerabilities. Assist with internal and external audits, regulatory examinations, and penetration tests by gathering evidence, responding to requests, and tracking findings. Help coordinate remediation efforts for audit, examination, and penetration test findings, including documentation of corrective actions and validation of closure. Maintain organized records and evidence demonstrating the ongoing operation of security controls. Support the execution of the Credit Union’s Information Security Program and Governance Plan, including recurring security reviews and control activities. Assist with security risk assessments, control testing, and periodic reviews (e.g., access reviews, firewall reviews, vulnerability scope reviews). Help maintain and update security-related documentation, procedures, and standards in alignment with regulatory expectations and organizational policies. Work closely with the virtual CISO (vCISO) and supporting security team, as well as internal Network Team to address security issues and implement recommended controls. Provide security guidance and support to IT staff and business units related to secure configurations, data protection, and incident response. Independently remediate security vulnerabilities and configuration issues within defined authority, escalating only those items that require broader approval, elevated risk acceptance, or cross-team coordination. Interact with third-party vendors and service providers on security-related matters as directed. Stay current with emerging security threats, vulnerabilities, and industry best practices relevant to financial institutions. Participate in after-hours or on-call activities as required to support security incidents, maintenance, or critical events. Requirements EDUCATION & EXPERIENCE Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field, or an equivalent combination of education and experience. 3 - 5 years of experience in information security, IT operations, or a related technical role. Hands-on experience with security tools such as vulnerability scanners, endpoint protection, and log monitoring/SIEM platforms. Experience supporting audits, regulatory examinations, penetration tests, or compliance activities in a regulated environment (financial services experience preferred). Working knowledge of information security principles, risk management concepts, and common control frameworks. Understanding of regulatory expectations applicable to credit unions or other regulated financial institutions (e.g., NCUA, FFIEC, GLBA). Ability to analyze technical findings and clearly document security issues, associated risks, and remediation actions. Strong attention to detail with the ability to manage multiple tasks, priorities, and follow-up activities. Salary Ranges: $80,104.00-$100,130.00 Exempt position. *Please note that the pay range listed represents the earning potential for this position and is only a general guideline that may be modified in the future. NIHFCU considers factors such as (but is not limited to) the scope and responsibilities of the position, the candidate’s applicable work and educational experience, the candidate’s certifications if required, and critical skills, as well as market and business considerations, including budgetary constraints and internal equity, when extending an offer. NIHFCU is an Equal Opportunity Employer and does not discriminate against employees or applicants based on race, color, religion, sex/gender, national origin, disability, age, or any other category protected by law.

How To Apply:

Incase you would like to apply to this job directly from the source, please click here

Responsibilities

The Information Security Analyst is responsible for the daily operation of the Information Security Program, including vulnerability management, security monitoring, and incident response. They work closely with the vCISO and IT staff to ensure the confidentiality and integrity of organizational systems in a regulated environment.