Senior Information Security Analyst

Job Description

Posted Wednesday, August 19, 2026 at 10:00 AM

Job Title: Senior Information Security Analyst
Status: Exempt
Reports to: Manager - Information Security Investigations
Department: IT - Info Sec Analysis and Investigation
Job Code: 11227
Pay Range: $ - $ Annually
Location: Remote in California

Golden 1 Credit Union is among the top credit unions in the country. As a member-owned, not-for-profit cooperative, Golden 1 is guided by the credit union philosophy of “people helping people.” We are committed to empowering our members and uplifting our communities as we create a more equitable and financially inclusive California. We welcome all who embrace our Core Values.

You are a security-focused technology professional with expertise in information security, vulnerability management, threat detection, and risk mitigation. You have a proven ability to partner with technical and business teams to strengthen security controls, lead incident response and threat hunting activities, and ensure compliance with regulatory and organizational requirements. Your experience includes improving security monitoring, managing vulnerabilities, evaluating security solutions, supporting audits, and driving secure configuration and change management practices.

You are passionate about protecting sensitive information, mentoring teams, and delivering practical, business-aligned security strategies that reduce risk while enabling innovation.

• Lead ongoing vulnerability management activities and identification of potential threats. Coordinate and direct technology staff in the identification and remediation of system vulnerabilities across the computing environment. Escalate any immediate and severe issues accordingly to the attention of the Manager – Information Security and appropriate reporting to senior leadership.
• Maintain, improve, and develop vendor supported and customized organizational processes supporting information security monitoring of asset, patch, network, vulnerability, change and configuration management.
• Prepares for and participates in threat hunting and security incident response activities. This includes working with Golden 1 IT and Information support teams to develop response readiness.
• Provide consultative support for technical and non-technical Golden 1 projects and initiatives requiring Information Security oversight to ensure policies, procedures and standards are met
• Define and evaluate functional requirements and specifications of security systems for both internal and external business environments.
• Partners with IT Development and Support teams to ensure appropriate procedures and processes are in place to provide optimal security monitoring of on-premises and cloud system environments as well as in establishing and managing a functional anti-virus/malware/DLP policy.
• Monitor, measure, test and report on the effectiveness and efficiency of information security controls as well as compliance with information security policies and procedure.
• Recommend new security solutions as well as effective improvements to existing security controls that do not negatively impact business innovation.
• Train colleagues on new Tactics, Techniques, and Procedures (TTP) of cyber-attacks and mentor junior teammates.
• Keep management updated on outstanding issues that are not resolved in a timely manner in accordance with established escalation procedures.
• Work with internal and external auditors during examinations providing support and assistance in addressing audit recommendations.
• Maintains a thorough understanding of state and federal laws and regulations related to credit union compliance including bank secrecy and anti-money laundering laws appropriate to the position.
• Performs other job-related duties as necessary.

• Bachelor’s Degree of Science in Computer Science, Management Information Systems, Information Security Information Assurance, or equivalent industry experience required
• 5+ years hands on experience in the management, configuration, administration, installation, and evaluation of network or operating systems software (Microsoft,…