Design, implement, and maintain IAM frameworks and security controls (EDR/XDR, firewalls, IDS/IPS, MFA, vulnerability management) for a credit union, ensuring FFIEC and NIST compliance and audit readiness.
The Senior InfoSec / Identity Access Management Analyst is responsible for designing, implementing, and maintaining security controls that protect the credit union’s systems, infrastructure, and data.
Ensures security capabilities are preventive, detective, and responsive, while maintaining compliance with regulatory requirements. The engineer works closely with IT, Infrastructure, Cloud, and Application teams to embed security into daily operations and ensure audit readiness.
Implements the enterprise Identity and Access Management (IAM) framework, governing how employees, contractors, and temporary staff are granted role-based access to systems and applications.
Maintains the documentation for certification and accreditation of each information system in accordance with Federal Financial Institutions Examination Council (FFIEC) requirements. Assess the impacts on system modifications and technological advances. Additionally, review systems in order to identify potential security weaknesses, recommend improvements to amend vulnerabilities, implement changes and document upgrades and familiarization with National Institute of Standards and Technology (NIST).
What You Will Do:
Design, implement, and maintain security controls across network, endpoint, server, cloud, and identity platforms.
Configure, tune, and support security tools including (but not limited to): Endpoint Detection and Response (EDR/XDR), Network security controls (firewalls, segmentation, IDS/IPS) Identity and Access Management (IAM), MFA, and privileged access controls Vulnerability management and configuration hardening tools.
Work with IT teams to prioritize remediation based on risk, exposure, and business impact. Track remediation progress and validate corrective actions.
Participate in security incident response activities, including detection, investigation, containment, and recovery, forensic data collection and evidence preservation as required.
Document technical controls, configurations, and operational procedures in an audit-ready manner.
Provide technical input into risk assessments, vendor reviews, and exception requests.
Review system designs and architecture for security risks and control gaps.
Develop and implement IAM framework. Partner with various stakeholders in the credit union to ensure that proposed processes meet regulatory requirements and best practices.
Help team members to determine security requirements for business processes and technology systems based upon generally accepted risk analysis methods, functional and performance requirements, information security architecture principles, and market-leading solutions.
Support the team in the creation, tracking, and completion of any compliance findings related to identity and access management.
Participate in audit related activities as they pertain to IT access for internal and external audits.