Information Security Data Analyst

Position Summary The Clearing House is seeking an analytical and technically skilled Information Security Data Analyst to support cybersecurity risk reporting, data analysis, and performance measurement across the enterprise Information Security program.

This role is responsible for transforming complex cybersecurity data into accurate, actionable insights that support operational decision-making, risk management, regulatory oversight, and executive reporting.

The Information Security Data Analyst will work closely with Security Operations, Vulnerability Management, Identity and Access Management, Infrastructure, and Technology Risk teams to develop automated reporting, dashboards, and metrics that provide visibility into the organization's cybersecurity posture.

A key focus of this position will be vulnerability management analytics, including the analysis of vulnerability exposure, remediation performance, asset criticality, and compliance with established remediation timelines.

The ideal candidate combines strong data analytics capabilities with an understanding of cybersecurity concepts and can translate large volumes of technical information into clear, meaningful insights for technical teams and senior leadership.

About The Clearing House:
The Clearing House Payments Company L.L.C. is a bank-owned industry utility that shapes the payments landscape and provides infrastructure for safe, reliable, and efficient payments. We see an economy where everyone is connected and a future where modern payments make life easier. The Clearing House operates four payment systems: a high-value wire-transfer system (the CHIPS network), the country’s first and largest instant payments system (the RTP network), an automated clearinghouse network (the EPN network), and a check image exchange network (the Image Exchange Network).

TCH also operates a bank account number tokenization service, runs a payments association known as the TCH Payments Authority, and maintains the rules for private-sector check image exchange through its ECCHO business line.

Key Responsibilities Cybersecurity Data Analytics & Reporting Collect, analyze, validate, and interpret cybersecurity data from multiple enterprise security platforms.

Develop and maintain dashboards, reports, and analytical models that measure cybersecurity risk, operational effectiveness, and control performance.

Transform complex technical data into clear, actionable insights for Information Security leadership, executive management, and risk committees.

Identify trends, anomalies, emerging risks, and opportunities for improvement across cybersecurity operations.

Establish repeatable reporting processes that improve accuracy, consistency, and timeliness.

Automate data collection, transformation, reconciliation, and reporting to reduce manual effort.

Support the development of cybersecurity key risk indicators (KRIs), key performance indicators (KPIs), and operational metrics.

Maintain clear documentation of data sources, metric definitions, calculations, assumptions, and reporting methodologies.

Vulnerability Management Analytics Develop and maintain vulnerability reporting across on-premises infrastructure, cloud environments, applications, and enterprise platforms.

Analyze vulnerability data from Tenable, Service Now Vulnerability Response, and other relevant security tools.

Track critical and high-severity vulnerabilities, remediation timelines, aging, exceptions, and exposure beyond established service-level agreements.

Correlate vulnerability findings with asset inventories, business criticality, ownership, and operational context to improve risk-based prioritization.

Identify recurring vulnerabilities, remediation bottlenecks, data quality issues, and emerging exposure trends.

Develop reporting that distinguishes newly discovered vulnerabilities from existing exposure, overdue remediation, and changes resulting from expanded scanning coverage.

Partner with infrastructure and application teams to validate vulnerability data, identify remediation owners, and improve reporting accuracy.

Support vulnerability governance meetings through preparation of metrics, trend analysis, and executive-level reporting.

Develop analytical capabilities to measure remediation progress and assess the effectiveness of vulnerability management activities.

Security Metrics & Risk Reporting Support the design, development, and maintenance of Information Security KRIs and KPIs aligned with enterprise risk management…