What are the responsibilities and job description for the IT Governance, Risk and Compliance Analyst position at Coastal Credit Union?

Job Description

Job Title : IT Governance Risk and Compliance Analyst

Dept : Information Security

Position Location : 1000 St. Albans Dr.; Raleigh, NC 27609. Hybrid role, must live locally.

Your impact :

As Coastal's IT Governance, Risk, & Compliance (GRC) Analyst, you'll have the opportunity to use your strong analytical talents and IT aptitude to help coordinate Coastal's information security and IT governance activities, facilitate IT risk assessments and audits, and assist with implementing process improvements and transformations. You'll also have the opportunity to use your interpersonal skills as you partner with business units to assess risk and communicate recommendations.

The contributions you can anticipate making :

Assisting with IT Process Improvement and Transformation : (20%)

Assisting with the development of process improvements across the various sectors of IT
Documenting security standards & processes for activities across the IT domain
Working with IT managers and VPs to influence changes in methodology and foster efficiency gains and security improvements

Facilitating IT Risk Assessments and IT Audit : (15%)

Facilitating and coordinating IT risk assessments into GRC risk register

Centrally managing IT application and service profiles as they relates to IT Risk Assessment (ITRA), Business Impact Analysis (BIA), and Risk Findings / Exceptions

Staying up to date on regulatory and compliance requirements; e.g. NCUA, FFIEC, GLBA, PCI-DSS, SOX, SSAE16 / 18, PHI

Facilitating engagements related to external and internal audits

Coordinating Projects & Remediation Activities : (30%)

Coordinating IT audits / penetration tests / assessments and remediation activities

Prioritizing information security project resource allocation in accordance with approved team objectives

Establishing and communicating major milestones and timelines for project completion

Tracking and reporting project progress and any modifications in timeline

Assessing any risk to expected target dates and escalating as needed

Measuring and reporting on Governance, Risk, and Compliance : (35%)

Identifying compliance gaps

Measuring adherence to regulations and internal policies and standards

Reporting on any audit / penetration test / assessment findings and tracking exceptions

Collecting metrics and producing periodic reporting

To be successful in this role, you will be :

A detail-oriented person who thrives on analyzing and interpreting processes or data and making recommendations accordingly

A persuasive communicator who enjoys presenting their analyses, ideas, and solutions to others so that even those outside the field can understand them

An innately cautious person who naturally sees potential risks and puts a plan in place to try and mitigate them

An organized individual for whom time management and the ability to establish priorities comes naturally

A person who derives a feeling of competence from thoroughly understanding the regulations and compliance requirements that go along with IT risk assessment and staying on top of new developments in the field

Someone who enjoys technical writing

Interested? Here's what we need to see on your resume :

Required experience :

Five years' experience assessing and addressing security risks in IT environments

Five years' experience in IT governance activities

Two years' experience working in an ITIL environment

Two years' experience in auditing and / or assisting with process improvement

Preferred experience :

MS-Office, Visio, and Project

Experience with the technological aspects of a depository institution

Experience with Governance Risk and Compliance (GRC) tool to conduct assessments is preferred

Education :

Related degree or comparable experience. Degree in Computer Science or Information Systems preferred. Information Security certifications such as CISSP, CRISC, CISM, CISA, or Security preferred.

Deadline for Application : All resumes must be received on or before 3 / 15 / 2025

Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time.

Coastal Federal Credit Union is committed to providing reasonable accommodations to applicants who may have disabilities. If you need special assistance or an accommodation in applying for employment, please contact our HR department at slepanto@coastal24.com. Request for reasonable accommodation will be considered on a case by case basis.

It's our duty to create a workplace and company culture where everyone feels heard and valued, and is appreciated for their unique backgrounds, experiences, and perspectives. At the end of the day, what truly matters is that every person who walks through our doors believes that they are an integral part of our team and can bring their best, true self to work each day. Building a culture of inclusivity means creating an environment where everyone thrives and succeeds together."

Tyler Grodi, CEO

VEVRAA Federal Contractor

Equal Opportunity / Affirmative Action Employer

Minority / Female / Disability / Veterans

Apply for this job

Receive alerts for other IT Governance, Risk and Compliance Analyst job openings

IT Governance, Risk and Compliance Analyst

What are the responsibilities and job description for the IT Governance, Risk and Compliance Analyst position at Coastal Credit Union?

What is the career path for a IT Governance, Risk and Compliance Analyst?

Job openings at Coastal Credit Union

Not the job you're looking for? Here are some other IT Governance, Risk and Compliance Analyst jobs in the Raleigh, NC area that may be a better fit.

We don't have any other IT Governance, Risk and Compliance Analyst jobs in the Raleigh, NC area right now.

AI Assistant is available now!