GRC Analyst

Working at Kirtland CU is more than a job-it's a career, and one in the financial world! We pride ourselves on helping our employees learn, grow, and advance in any direction they choose. We offer a highly competitive salary, great benefits package and an energetic, vibrant work environment.

We are currently seeking a Senior Information Security Administrator to join Kirtland Credit Union! This is a regular, full-time position. We welcome applications from both local and remote candidates. While hybrid work offers some additional opportunities for in-person collaboration, we are flexible and prepared to support a fully remote arrangement for the best candidate.

Join the rest of our teammates and become eligible for a generous benefits package that we offer:

Medical, Dental and Vision Insurance
401(k) Retirement savings program
401 (k) employer match
Paid time off with accrual starting from day one.
11 Paid holidays off during the year!
Tuition Reimbursement for College Degrees
Employee Clothing Advance
Fitness Reimbursement Program
Employer paid Life Insurance
Employee Assistance Program
Employer paid Short- and Long-Term Disability Insurance
Travel Assistance Program

This is what we would like you to do:

Responsible for serving as the highest-level technical information security professional within the Credit Union and providing advanced security engineering, security operations, security architecture, threat detection, threat response, vulnerability management, and infrastructure security expertise across the enterprise technology environment. Primarily responsible for the implementation, administration, optimization, and continuous improvement of security technologies, controls, and monitoring capabilities that protect Credit Union systems, networks, data, and member information.

Ensures security systems, applications, and technology infrastructure are implemented and maintained in accordance with regulatory requirements, industry best practices, organizational standards, and defense-in-depth principles. Serves as the senior technical resource for incident response, threat analysis, security investigations, vulnerability remediation, security testing, disaster recovery preparedness, and the protection of confidential member information.

Partners closely with the VP Information Security Officer, Technology Department personnel, auditors, vendors, and business stakeholders to identify security risks, enhance control effectiveness, support compliance initiatives, strengthen operational resilience, and improve the overall security posture of the Credit Union.

Primary Job Duties:

Administers, engineers, and enhances enterprise information security systems and controls.
Serves as the primary technical subject matter expert for enterprise security technologies and security architecture.
Designs, implements, configures, and maintains security solutions including endpoint protection, EDR/XDR platforms, SIEM systems, vulnerability management platforms, email security systems, data protection technologies, privileged access controls, identity services, cloud security tools, and network security systems.
Evaluates emerging threats, vulnerabilities, attack techniques, and security technologies and recommends appropriate technical mitigation strategies.
Leads security hardening efforts for servers, workstations, network infrastructure, cloud platforms, storage systems, and business applications.
Maintains secure authentication, authorization, least privilege, and separation of duties controls across enterprise systems.
Develops, maintains, and validates technical security baselines and configuration standards.
Assists with the evaluation, implementation, and integration of new technologies to ensure appropriate security controls are incorporated during deployment.
Provides advanced technical guidance and mentorship to Technology personnel regarding secure system administration and cybersecurity best practices.
Leads enterprise vulnerability management and security remediation activities.
Oversees vulnerability identification, validation, risk analysis, prioritization, and remediation activities across all technology platforms.
Coordinates vulnerability scanning activities and reviews results for accuracy and remediation planning.
Performs technical analysis of security findings, penetration test results, audit findings, and vendor assessments.
Works directly with system administrators, engineers, vendors, and application owners to develop remediation plans.
Verifies completion and effectiveness of remediation activities through testing and validation.
Maintains vulnerability and remediation tracking records to support audit and compliance requirements.
Supports secure patch management practices and assists in establishing remediation priorities based on risk.
Performs advanced monitoring, threat detection, and incident response functions.
Investigates security alerts, suspicious activities, and indicators of compromise identified through security monitoring systems.
Coordinates technical response efforts for security incidents including malware, ransomware, unauthorized access attempts, data exposure events, and system compromises.
Conducts root cause analysis and develops recommendations to reduce recurrence.
Works directly with managed security service providers, SOC providers, vendors, and law enforcement contacts as directed.
Collects, preserves, and analyzes security event data and evidence required for investigations.
Develops and maintains detection use cases, alerting logic, dashboards, and monitoring capabilities.
Participates in incident response testing and recovery exercises.
Assists in execution of breach response procedures and containment activities when required.

Education/Certification:

Bachelor's degree in Information Technology, Information Security, Cybersecurity, Computer Science, or related field preferred
One or more advanced industry related certifications
CISSP
CISM
GIAC certification
Security+
CEH
SC-200
SC-300
SC-100
Azure Security Engineer Associate

Experience:

Minimum 5+ years of progressive experience in Information Security
3+ years working in a regulated financial services, banking, or credit union environment preferred.
Experience with vulnerability management, security monitoring, incident response, and regulatory compliance.
Experience supporting audits, examinations, or cybersecurity assessments

Knowledge, skills and abilities:

In-depth knowledge and experience in the following information security areas:
Microsoft 365 security technologies
Azure/Entra ID
Active Directory
SIEM platforms
EDR/XDR platforms
Network security technologies
Vulnerability management platforms
Identity and access management
Cloud security concepts
Email security systems
Security frameworks and regulatory requirements
Security monitoring platforms
Firewalls and intrusion prevention systems
Identity and access management solutions
SQL security configuration experience preferred
Ability to independently analyze complex technical and security issues and develop effective solutions.
Ability to make sound risk-based decisions under pressure and during incident response activities.
Demonstrated ability to lead technical initiatives and serve as a senior technical advisor.
Strong analytical, troubleshooting, and problem-solving abilities.
Excellent written, verbal, and presentation communication skills.
Ability to communicate technical concepts effectively to both technical and non-technical audiences.
Strong organizational and project coordination skills.
Self-motivated, highly accountable, and capable of operating with minimal supervision.
Experience working effectively in a team-oriented and collaborative environment.

To apply for this exciting opportunity, visit our careers page at www.kirtlandcu.org/careers

Kirtland Credit Union is an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law.

Originally posted on Himalayas

Job Description

Join the rest of our teammates and become eligible for a generous benefits package that we offer:

Medical, Dental and Vision Insurance
401(k) Retirement savings program
401 (k) employer match
Paid time off with accrual starting from day one.
11 Paid holidays off during the year!
Tuition Reimbursement for College Degrees
Employee Clothing Advance
Fitness Reimbursement Program
Employer paid Life Insurance
Employee Assistance Program
Employer paid Short- and Long-Term Disability Insurance
Travel Assistance Program

This is what we would like you to do:

Primary Job Duties:

Administers, engineers, and enhances enterprise information security systems and controls.
Serves as the primary technical subject matter expert for enterprise security technologies and security architecture.
Designs, implements, configures, and maintains security solutions including endpoint protection, EDR/XDR platforms, SIEM systems, vulnerability management platforms, email security systems, data protection technologies, privileged access controls, identity services, cloud security tools, and network security systems.
Evaluates emerging threats, vulnerabilities, attack techniques, and security technologies and recommends appropriate technical mitigation strategies.
Leads security hardening efforts for servers, workstations, network infrastructure, cloud platforms, storage systems, and business applications.
Maintains secure authentication, authorization, least privilege, and separation of duties controls across enterprise systems.
Develops, maintains, and validates technical security baselines and configuration standards.
Assists with the evaluation, implementation, and integration of new technologies to ensure appropriate security controls are incorporated during deployment.
Provides advanced technical guidance and mentorship to Technology personnel regarding secure system administration and cybersecurity best practices.
Leads enterprise vulnerability management and security remediation activities.
Oversees vulnerability identification, validation, risk analysis, prioritization, and remediation activities across all technology platforms.
Coordinates vulnerability scanning activities and reviews results for accuracy and remediation planning.
Performs technical analysis of security findings, penetration test results, audit findings, and vendor assessments.
Works directly with system administrators, engineers, vendors, and application owners to develop remediation plans.
Verifies completion and effectiveness of remediation activities through testing and validation.
Maintains vulnerability and remediation tracking records to support audit and compliance requirements.
Supports secure patch management practices and assists in establishing remediation priorities based on risk.
Performs advanced monitoring, threat detection, and incident response functions.
Investigates security alerts, suspicious activities, and indicators of compromise identified through security monitoring systems.
Coordinates technical response efforts for security incidents including malware, ransomware, unauthorized access attempts, data exposure events, and system compromises.
Conducts root cause analysis and develops recommendations to reduce recurrence.
Works directly with managed security service providers, SOC providers, vendors, and law enforcement contacts as directed.
Collects, preserves, and analyzes security event data and evidence required for investigations.
Develops and maintains detection use cases, alerting logic, dashboards, and monitoring capabilities.
Participates in incident response testing and recovery exercises.
Assists in execution of breach response procedures and containment activities when required.

Education/Certification:

Bachelor's degree in Information Technology, Information Security, Cybersecurity, Computer Science, or related field preferred
One or more advanced industry related certifications
CISSP
CISM
GIAC certification
Security+
CEH
SC-200
SC-300
SC-100
Azure Security Engineer Associate

Experience:

Minimum 5+ years of progressive experience in Information Security
3+ years working in a regulated financial services, banking, or credit union environment preferred.
Experience with vulnerability management, security monitoring, incident response, and regulatory compliance.
Experience supporting audits, examinations, or cybersecurity assessments

Knowledge, skills and abilities:

In-depth knowledge and experience in the following information security areas:
Microsoft 365 security technologies
Azure/Entra ID
Active Directory
SIEM platforms
EDR/XDR platforms
Network security technologies
Vulnerability management platforms
Identity and access management
Cloud security concepts
Email security systems
Security frameworks and regulatory requirements
Security monitoring platforms
Firewalls and intrusion prevention systems
Identity and access management solutions
SQL security configuration experience preferred
Ability to independently analyze complex technical and security issues and develop effective solutions.
Ability to make sound risk-based decisions under pressure and during incident response activities.
Demonstrated ability to lead technical initiatives and serve as a senior technical advisor.
Strong analytical, troubleshooting, and problem-solving abilities.
Excellent written, verbal, and presentation communication skills.
Ability to communicate technical concepts effectively to both technical and non-technical audiences.
Strong organizational and project coordination skills.
Self-motivated, highly accountable, and capable of operating with minimal supervision.
Experience working effectively in a team-oriented and collaborative environment.

To apply for this exciting opportunity, visit our careers page at www.kirtlandcu.org/careers

Originally posted on Himalayas

Job Description

Join the rest of our teammates and become eligible for a generous benefits package that we offer:

Medical, Dental and Vision Insurance
401(k) Retirement savings program
401 (k) employer match
Paid time off with accrual starting from day one.
11 Paid holidays off during the year!
Tuition Reimbursement for College Degrees
Employee Clothing Advance
Fitness Reimbursement Program
Employer paid Life Insurance
Employee Assistance Program
Employer paid Short- and Long-Term Disability Insurance
Travel Assistance Program

This is what we would like you to do:

Primary Job Duties:

Administers, engineers, and enhances enterprise information security systems and controls.
Serves as the primary technical subject matter expert for enterprise security technologies and security architecture.
Designs, implements, configures, and maintains security solutions including endpoint protection, EDR/XDR platforms, SIEM systems, vulnerability management platforms, email security systems, data protection technologies, privileged access controls, identity services, cloud security tools, and network security systems.
Evaluates emerging threats, vulnerabilities, attack techniques, and security technologies and recommends appropriate technical mitigation strategies.
Leads security hardening efforts for servers, workstations, network infrastructure, cloud platforms, storage systems, and business applications.
Maintains secure authentication, authorization, least privilege, and separation of duties controls across enterprise systems.
Develops, maintains, and validates technical security baselines and configuration standards.
Assists with the evaluation, implementation, and integration of new technologies to ensure appropriate security controls are incorporated during deployment.
Provides advanced technical guidance and mentorship to Technology personnel regarding secure system administration and cybersecurity best practices.
Leads enterprise vulnerability management and security remediation activities.
Oversees vulnerability identification, validation, risk analysis, prioritization, and remediation activities across all technology platforms.
Coordinates vulnerability scanning activities and reviews results for accuracy and remediation planning.
Performs technical analysis of security findings, penetration test results, audit findings, and vendor assessments.
Works directly with system administrators, engineers, vendors, and application owners to develop remediation plans.
Verifies completion and effectiveness of remediation activities through testing and validation.
Maintains vulnerability and remediation tracking records to support audit and compliance requirements.
Supports secure patch management practices and assists in establishing remediation priorities based on risk.
Performs advanced monitoring, threat detection, and incident response functions.
Investigates security alerts, suspicious activities, and indicators of compromise identified through security monitoring systems.
Coordinates technical response efforts for security incidents including malware, ransomware, unauthorized access attempts, data exposure events, and system compromises.
Conducts root cause analysis and develops recommendations to reduce recurrence.
Works directly with managed security service providers, SOC providers, vendors, and law enforcement contacts as directed.
Collects, preserves, and analyzes security event data and evidence required for investigations.
Develops and maintains detection use cases, alerting logic, dashboards, and monitoring capabilities.
Participates in incident response testing and recovery exercises.
Assists in execution of breach response procedures and containment activities when required.

Education/Certification:

Bachelor's degree in Information Technology, Information Security, Cybersecurity, Computer Science, or related field preferred
One or more advanced industry related certifications
CISSP
CISM
GIAC certification
Security+
CEH
SC-200
SC-300
SC-100
Azure Security Engineer Associate

Experience:

Minimum 5+ years of progressive experience in Information Security
3+ years working in a regulated financial services, banking, or credit union environment preferred.
Experience with vulnerability management, security monitoring, incident response, and regulatory compliance.
Experience supporting audits, examinations, or cybersecurity assessments

Knowledge, skills and abilities:

In-depth knowledge and experience in the following information security areas:
Microsoft 365 security technologies
Azure/Entra ID
Active Directory
SIEM platforms
EDR/XDR platforms
Network security technologies
Vulnerability management platforms
Identity and access management
Cloud security concepts
Email security systems
Security frameworks and regulatory requirements
Security monitoring platforms
Firewalls and intrusion prevention systems
Identity and access management solutions
SQL security configuration experience preferred
Ability to independently analyze complex technical and security issues and develop effective solutions.
Ability to make sound risk-based decisions under pressure and during incident response activities.
Demonstrated ability to lead technical initiatives and serve as a senior technical advisor.
Strong analytical, troubleshooting, and problem-solving abilities.
Excellent written, verbal, and presentation communication skills.
Ability to communicate technical concepts effectively to both technical and non-technical audiences.
Strong organizational and project coordination skills.
Self-motivated, highly accountable, and capable of operating with minimal supervision.
Experience working effectively in a team-oriented and collaborative environment.

To apply for this exciting opportunity, visit our careers page at www.kirtlandcu.org/careers

Originally posted on Himalayas

Job Description

Join the rest of our teammates and become eligible for a generous benefits package that we offer:

Medical, Dental and Vision Insurance
401(k) Retirement savings program
401 (k) employer match
Paid time off with accrual starting from day one.
11 Paid holidays off during the year!
Tuition Reimbursement for College Degrees
Employee Clothing Advance
Fitness Reimbursement Program
Employer paid Life Insurance
Employee Assistance Program
Employer paid Short- and Long-Term Disability Insurance
Travel Assistance Program

This is what we would like you to do:

Primary Job Duties:

Administers, engineers, and enhances enterprise information security systems and controls.
Serves as the primary technical subject matter expert for enterprise security technologies and security architecture.
Designs, implements, configures, and maintains security solutions including endpoint protection, EDR/XDR platforms, SIEM systems, vulnerability management platforms, email security systems, data protection technologies, privileged access controls, identity services, cloud security tools, and network security systems.
Evaluates emerging threats, vulnerabilities, attack techniques, and security technologies and recommends appropriate technical mitigation strategies.
Leads security hardening efforts for servers, workstations, network infrastructure, cloud platforms, storage systems, and business applications.
Maintains secure authentication, authorization, least privilege, and separation of duties controls across enterprise systems.
Develops, maintains, and validates technical security baselines and configuration standards.
Assists with the evaluation, implementation, and integration of new technologies to ensure appropriate security controls are incorporated during deployment.
Provides advanced technical guidance and mentorship to Technology personnel regarding secure system administration and cybersecurity best practices.
Leads enterprise vulnerability management and security remediation activities.
Oversees vulnerability identification, validation, risk analysis, prioritization, and remediation activities across all technology platforms.
Coordinates vulnerability scanning activities and reviews results for accuracy and remediation planning.
Performs technical analysis of security findings, penetration test results, audit findings, and vendor assessments.
Works directly with system administrators, engineers, vendors, and application owners to develop remediation plans.
Verifies completion and effectiveness of remediation activities through testing and validation.
Maintains vulnerability and remediation tracking records to support audit and compliance requirements.
Supports secure patch management practices and assists in establishing remediation priorities based on risk.
Performs advanced monitoring, threat detection, and incident response functions.
Investigates security alerts, suspicious activities, and indicators of compromise identified through security monitoring systems.
Coordinates technical response efforts for security incidents including malware, ransomware, unauthorized access attempts, data exposure events, and system compromises.
Conducts root cause analysis and develops recommendations to reduce recurrence.
Works directly with managed security service providers, SOC providers, vendors, and law enforcement contacts as directed.
Collects, preserves, and analyzes security event data and evidence required for investigations.
Develops and maintains detection use cases, alerting logic, dashboards, and monitoring capabilities.
Participates in incident response testing and recovery exercises.
Assists in execution of breach response procedures and containment activities when required.

Education/Certification:

Bachelor's degree in Information Technology, Information Security, Cybersecurity, Computer Science, or related field preferred
One or more advanced industry related certifications
CISSP
CISM
GIAC certification
Security+
CEH
SC-200
SC-300
SC-100
Azure Security Engineer Associate

Experience:

Minimum 5+ years of progressive experience in Information Security
3+ years working in a regulated financial services, banking, or credit union environment preferred.
Experience with vulnerability management, security monitoring, incident response, and regulatory compliance.
Experience supporting audits, examinations, or cybersecurity assessments

Knowledge, skills and abilities:

In-depth knowledge and experience in the following information security areas:
Microsoft 365 security technologies
Azure/Entra ID
Active Directory
SIEM platforms
EDR/XDR platforms
Network security technologies
Vulnerability management platforms
Identity and access management
Cloud security concepts
Email security systems
Security frameworks and regulatory requirements
Security monitoring platforms
Firewalls and intrusion prevention systems
Identity and access management solutions
SQL security configuration experience preferred
Ability to independently analyze complex technical and security issues and develop effective solutions.
Ability to make sound risk-based decisions under pressure and during incident response activities.
Demonstrated ability to lead technical initiatives and serve as a senior technical advisor.
Strong analytical, troubleshooting, and problem-solving abilities.
Excellent written, verbal, and presentation communication skills.
Ability to communicate technical concepts effectively to both technical and non-technical audiences.
Strong organizational and project coordination skills.
Self-motivated, highly accountable, and capable of operating with minimal supervision.
Experience working effectively in a team-oriented and collaborative environment.

To apply for this exciting opportunity, visit our careers page at www.kirtlandcu.org/careers

Originally posted on Himalayas