Information Security Analyst

Are you an InfoSec professional looking to make a positive impact at an organization that recognizes your talent? Look no further!

As an Information Security Analyst, you will be NuMark Credit Union's hands-on defender. You will monitor and respond to security events, run the vulnerability management program, manage third-party security risk, and produce the evidence and documentation our examiners and auditors rely on. You will work closely with IT operations, our managed detection and response partner, and business units across the credit union. This role suits someone who likes both technical investigation and turning findings into lasting fixes.

What You'll Do:

• Triage and investigate alerts in Microsoft Defender XDR (Endpoint, Identity, Office 365, Cloud Apps) and escalations from our managed SOC/MDR provider.
• Lead or support incident response activities: containment, evidence collection, root-cause analysis, and post-incident reporting in line with NuMark's Incident Response Plan and NCUA notification requirements.
• Analyze phishing and email threats, including user-reported messages, and tune email security controls.
• Hunt proactively for threats using KQL and available telemetry.
• Run the vulnerability management program: scanning, risk-based prioritization, remediation tracking, and exception handling.
• Track penetration test and audit findings through to verified closure.
• Monitor secure configuration across endpoints (Intune), identities (Entra ID), and cloud resources (Azure, Defender for Cloud).
• Prepare evidence and documentation for IT examinations, internal and external audits, and regulatory reviews (NCUA, FFIEC, GLBA / NCUA Part 748).
• Maintain security policies, standards, and procedures, and track the security exception register.
• Support data protection efforts, including Microsoft Purview sensitivity labeling and DLP.
• Contribute security metrics and reporting for the Information Security Committee.
• Review SOC reports for exceptions and complementary user entity controls (CUECs), and confirm that NuMark has the matching controls in place.
• Work with contract owners to include appropriate security, data protection, breach notification, and right-to-audit provisions in vendor agreements.
• Keep the vendor inventory accurate and produce third-party risk documentation for examiners, auditors, and the Information Security Committee, following NCUA and FFIEC outsourcing guidance.
• Help run security awareness training and phishing simulations.
• Advise IT and business teams on secure design for new projects, vendors, and technologies.
• Take part in business continuity and disaster recovery testing.

Qualifications:

• At least three years of experience in information security, security operations, or systems or network administration with significant security responsibilities required.
• Hands-on experience with Microsoft security tools, including Defender XDR, Entra ID, and Intune required.
• Working knowledge of networking, firewalls (Palo Alto preferred), DNS, and TCP/IP required.
• Understanding of incident response, vulnerability management, and common attack techniques (MITRE ATT&CK) required.
• Strong written communication skills, including the ability to document findings clearly for technical staff, leadership, and examiners required.
• Ability to handle confidential information with discretion required.
• Experience in a credit union, bank, or other regulated financial institution preferred.
• Familiarity with the FFIEC CAT / CISA CPGs, NIST CSF, or CIS Controls preferred.
• Experience with third-party risk management programs or platforms (e.g., Nvendor, Venminder) preferred.
• KQL, PowerShell, or other scripting experience preferred.
• Experience with Azure security (Defender for Cloud, Azure Firewall, networking) preferred.
• Exposure to Microsoft Purview, Zscaler, or Mimecast preferred.
• Certifications such as Security+, CySA+, SC-200, GCIH, or CISSP (or progress toward one) preferred.

More about Us:

NuMark's mission is to enrich the financial lives of our members. We offer a full menu of financial services from mortgage and auto loans to free checking accounts and business services. NuMark Credit Union is dedicated to putting our members first, treating them like family and helping them do more with their money. We help members get to their fantastic future faster.

At NuMark Credit Union, we recognize how vital our team is to the success of our organization. We believe that investing in the wellness and professional development of our people should be at the forefront of how we operate. Our focus is on making employees feel valued and supported because we know a strong team and positive culture is what gives us a competitive advantage in the markets that we serve. Take a look at our core values that dictate how we treat members and each other:

Passionate – We are dedicated to exceeding expectations and are passionate, open-minded, and committed to serving members and their families on their lifelong financial journeys.

Accountable – We take ownership of our responsibility to act in the best interests of our members and treat everyone with respect.

Collaborative – We work together to provide exceptional service to our members, communities, and each other. We believe in the power of teamwork to achieve a common goal.

Knowledgeable – We believe knowledge is power and that it should be freely shared with our members, communities, and employees.

Member Centric – NuMark members are the foundation of who we are. Our members and our team are made up of diverse backgrounds. This allows us to be an inclusive organization where we can proudly serve everyone.

Benefits:

We want to make sure you're taken care of, which is why we strive to offer competitive and cost-conscious benefits for you and your family. Full Time Employees can choose between several plans from Blue Cross Blue Shield (HMO, Options or PPO), Dental, Vision, 3 weeks of Paid Time Off, Paid Holidays Off, Company Lunches and Parties, Birthday Holidays, Life Insurance (Company Paid), Short and Long Term Disability (Company Reimbursed), 401(k) Savings Plan with Company Match & Profit Sharing, Flex Spending Account, Accident Insurance Plans, Education Reimbursement for Bachelor or Master's Degrees, Employee Assistance Program, Paid Community Volunteer Time, and Career Advancement Opportunities.

Equal Opportunity Employer:

Equal Employment Opportunity has been, and will continue to be, a fundamental principle of NuMark Credit Union where employment is based upon personal capabilities and qualifications without discrimination because of race, color, religion, sex, age, national origin, disability, or any other protected characteristic as established by law.

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions under the Americans with Disabilities Act (ADA).

• While performing the duties of this job, the employee may be regularly required to stand, sit, talk, hear, reach, stoop, kneel, and use hands and fingers to operate a computer, telephone, and keyboard.
• Specific vision abilities required by this job include close vision requirements due to computer work.
• The ability to talk and hear both in-person and by telephone is required.
• Light to moderate lifting may be required up to 25 pounds.
• Regular, predictable, in-person attendance is required at the employee's assigned location(s) for all scheduled shifts.

Work Environment

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions under the Americans with Disabilities Act (ADA).

• Moderate noise (i.e., business office indoors with computers, phone, and printers, light traffic).
• Ability to work in a confined area.

Compensation Range (exempt): $85,000 - $105,000 annually. Employees are eligible for yearly merit increases based on performance.