• Understands established standards and uses established processes in multiple types of technology (vulnerability management, network security, privacy, etc.)
• Can understand cybersecurity frameworks and describe how controls are effective in supporting key security principles (eg. Confidentiality, integrity, availability.)
• Escalates exceptions to existing standards identified through established process and procedures to accurately report on risks in IT security landscape.
• Participates in processes to test of IT Security controls and gathers artifacts in accordance with established stakeholders.
• Uses established process in IT Security Governance to support stakeholders in with Risk and Internal Audit teams and work to provide needed support.
• Collects evidence and ensures accuracy of reports and other artifacts.
• Able to participate across teams and present to various stakeholders and team members in technical and non-technical contexts.
• Understanding of enterprise IT systems and environments (e.g., on-prem, SaaS, third-party management.)
• Continually improves professionally by reviewing webinars, pursuing industry certifications, and participate in professional organizations and conferences.
• Perform other duties as assigned.

Required Qualifications

• Experience

• 3 years related experience in cybersecurity: auditing, risk, or engineering.

• Demonstrated ability to participate in projects by being accountable for tasks and reporting of progress.

• Demonstrated ability to understand cybersecurity frameworks and associated industry best practice inside a regulatory environment.

• Demonstrated ability to understand and describe needed artifacts of established security testing.

• Demonstrated ability to understand standards and policies with risk-based approach to cybersecurity: analyzing, prioritizing, and remediating.

• Demonstrated ability to understand learning topics relevant to the credit union’s threat landscape and presented to team members.

• Demonstrated ability to understand the purpose of compensating controls in some areas of technology.

• Demonstrated ability to understand IT KPIs and KRIs and how they demonstrate specific cybersecurity control effectiveness.

• Demonstrated ability to understand and describe 3rd party cybersecurity risk.

• Education

• Four-year college degree or equivalent experience in IT Technology.

• Licenses, Certificates, Registrations

• Intermediate to advanced IT Security/Audit/Risk Certifications from recognized security body (e.g., ISC2 CGRC, CISA, CISSP);

• Computer/Office Equipment Skills

• Skills in Microsoft Office including Outlook, Word, and Excel

• Language Skills

• Demonstrated ability to clearly express ideas, methodology, results and recommendations verbally, in writing and through insightful reports and graphic illustrations regarding business and technology needs.

• Demonstrated ability to document outcomes and present information in a manner appropriate for key stakeholders and all levels of the organization.

• Other Skills and Abilities

• Able to be accountable for tasks inside of IT Security projects.

• Collaborates with team members in established processes.

• Assists team members with tasks and provides assistance as needed.

• Participates in interviewing efforts.

Preferred Qualifications

• Credit Union or banking compliance experience is a plus.

If you need assistance with filling out our application form or during any phase of the application, interview, or employment process, please notify our Human Resources Team at 801-366-6947 option 1 or email macurecruiting@macu.com and every reasonable effort will be made to accommodate your needs in a timely manner.

PHYSICAL ABILITIES / WORKING CONDITIONS

Physical Demands

• Ability to sit, talk and hear consistently
• Ability to stand, walk, and use hands to handle or reach occasionally

Vision Requirements

• Close vision (clear vision at 20 inches or less)
• Distance vision (clear vision at 20 feet or more)

Weight Lifted or Force Exerted

• Ability to lift up to 10 pounds occasionally

Environmental

• There are no unusual environmental factors (such as a typical office)

Noise Environment

• Moderate noise (business office with computers and printers, light traffic)

This Job is not eligible to be performed in Colorado or Connecticut, either remotely or in-person.

#LI-FB1