IS Analyst

Role

About the Role

At Southland Credit Union, we believe People Helping People means creating a secure and trusted environment where our members can confidently achieve their financial well-being. Behind every great member experience is a strong commitment to protecting the information, systems, and services our members and associates rely on every day.

As an Information Services Analyst, you'll play an important role in protecting that trust. You'll serve as a subject matter expert in information security, helping Southland evaluate cybersecurity risks, strengthen security controls, interpret regulatory requirements, and make informed decisions about how we protect the organization. Your recommendations will help leadership understand risk, prioritize action, and support the Credit Union's business goals while maintaining a strong security and compliance foundation.

This opportunity is a great fit for someone who enjoys analyzing complex security and regulatory issues, solving problems, and turning technical information into practical recommendations. If you enjoy working independently while collaborating with teams across an organization - and want your expertise to influence meaningful security decisions,we'd love to hear from you.

What You'll Be Doing

• Evaluate information security controls and critical business processes to identify risks, determine effectiveness, and recommend meaningful improvements.
• Lead enterprise information security risk assessments by analyzing threats, vulnerabilities, business impact, likelihood, and residual risk.
• Interpret regulatory requirements and recognized security frameworks, including NCUA, GLBA, NIST, and ISO 27001, and translate them into practical security and compliance recommendations.
• Develop and maintain information security policies, standards, procedures, and governance documentation that strengthen the organization's security program.
• Guide business teams on security requirements, policy expectations, risk considerations, and appropriate control strategies.
• Support internal and external audits by evaluating evidence, developing responses, explaining security controls, and helping prioritize remediation efforts.
• Analyze security events and vulnerability assessment results to determine business impact, risk exposure, and appropriate response or remediation priorities.
• Advise management on cybersecurity threats, security exceptions, risk treatment strategies, and opportunities to strengthen the organization's security posture.
• Lead or contribute as a subject matter expert on strategic security initiatives and enterprise improvement projects.
• Identify opportunities to strengthen governance, improve processes, increase security maturity, and use automation to support security and compliance goals.

What You'll Bring

Experience

• 4-6 years of experience in information security, cybersecurity, risk management, compliance, or IT audit.
• Demonstrated experience conducting information security risk assessments, evaluating security controls, interpreting regulatory requirements, and developing governance documentation.
• Experience advising management or business stakeholders on cybersecurity risks and recommendations.
• Experience with security control assessments, regulatory compliance activities, or internal/external audits is preferred.
• Working knowledge of security tools and technologies.

Education

• Bachelor's degree in Information Security, Cybersecurity, Information Systems, Computer Science, or a related field, or an equivalent combination of education and relevant experience.

Knowledge, Skills & Abilities

• Strong analytical thinking and structured problem-solving skills.
• Ability to assess risk, evaluate business impact, and make sound recommendations using independent judgment.
• Knowledge of information security governance, risk management, compliance, and cybersecurity practices.
• Ability to interpret complex regulatory requirements and security frameworks and translate them into practical guidance.
• Strong written and verbal communication skills, including the ability to explain technical concepts to non-technical stakeholders.
• Ability to work effectively both independently and collaboratively with individuals at all levels of the organization.
• Strong organization, attention to detail, and ability to manage competing priorities.
• Sound judgment, discretion, accountability, and a commitment to ethical decision-making.
• Proficiency with standard office technology…