United Community ยท 1 month ago
Information Security Controls Analyst
United Community is seeking an experienced Information Security Controls Analyst to serve as a subject matter expert in evaluating and strengthening our cybersecurity and technology controls. This role plays a critical part in assessing risk exposure, recommending control improvements, and ensuring alignment with regulatory standards and business risk tolerance.
Banking
Responsibilities
Review and document the adequacy of security and technology controls across business and IT environments
Evaluate control posture through interviews, documentation reviews, and workflow analysis
Recommend and support implementation of risk reduction strategies via policies, procedures, and technical controls
Partner with risk management and security leadership to align controls with organizational risk tolerance
Identify control strengths and weaknesses related to privacy, security, resiliency, and compliance
Document and advocate for control improvements that balance risk with operational efficiency
Support control development across testing, QA, and production environments
Present control effectiveness reports to senior risk leadership
Stay current on regulatory requirements, internal policies, and industry best practices
Qualification
Required
3+ years in cybersecurity or IT practitioner roles
2+ years in IT risk or controls analysis
Practical experience with risk management and IT control frameworks
Strong understanding of risk frameworks (CRI, COSO, RMF, COBIT, NIST)
Familiarity with regulatory standards (PCI, FFIEC, SOX, HIPAA, GDPR, CCPA, GLBA)
Experience with CIS CSC, ISO 2700, or NIST CSF
Excellent written and verbal communication across all organizational levels
Strong organizational skills and ability to meet SLAs
Sound judgment and decision-making in complex scenarios
High integrity, trustworthiness, and adaptability
Preferred
Certifications such as CISSP, CISA, CRISC, or CISM
Technical experience with enterprise networks, applications, and directory services
Familiarity with enterprise GRC platforms
Company
United Community
Since 1950, United Community has been driven to provide best-in-class service as we work to improve the financial well-being of the people and communities we serve.