Information Security Analyst - JR

This is an early-career position with real responsibility and a clear path for growth.

You’ll conduct information security assessments for smaller credit unions, covering information security, privacy, business continuity, identity management, user access, data integrity, and related controls.

Most of your work will be remote, including evidence review, analysis, client meetings, and report writing. You’ll also travel to client locations for onsite assessment activities, including limited physical security testing and social engineering.

We don’t expect you to know everything on day one. We do expect you to be ready to learn and apply what you learn.

You’ll start by shadowing experienced assessors on several engagements. Next, you’ll take the lead while a senior analyst provides oversight. As your capabilities develop, you’ll begin managing engagements independently.

We have a defined progression from Junior Analyst to Analyst to Senior Analyst, with established competencies and compensation bands at each level.

What You’ll Do

• Conduct information security assessments for smaller credit unions, primarily aligned with NCUA guidance.
• Manage assigned assessments from kickoff through final reporting as your experience develops.
• Review evidence, evaluate security practices, conduct client interviews, and document findings.
• Assess technical, administrative, and physical security controls.
• Perform limited onsite social engineering and physical security testing.
• Identify security risks, control gaps, and opportunities for improvement.
• Prepare clear, accurate, actionable assessment reports following internal standards.
• Manage engagement timelines, deliverables, and client communications.
• Develop proficiency with NIST CSF, CIS Controls v8, NCUA ISE, and other applicable assessment frameworks.
• Expand into additional technical assessments, including firewall, VPN, and virtual environment reviews.
• Continue developing your knowledge through research, training, and professional certifications.

• At least one year of experience in information security, IT audit, governance, risk and compliance (GRC), or a related IT role.
• Some practical exposure to cybersecurity assessments, audits, or compliance activities.
• Understanding of fundamental information security concepts and controls.
• Familiarity with technical, administrative, and physical security safeguards.
• Strong written and verbal communication skills, including the ability to explain technical issues to nontechnical stakeholders.
• Strong analytical skills, attention to detail, and the ability to manage competing priorities.
• Self-motivation, curiosity, and a willingness to take ownership of assigned work.
• Ability to work independently in a remote environment once trained.
• Confidence and professionalism when interacting directly with clients.

A degree in cybersecurity, computer science, or a related discipline is a plus, but not required.

Security+ or a comparable entry-level cybersecurity certification is also a plus., * Be a team player with a positive attitude.

• Willingness to travel domestically, typically about once per month, with occasional increases based on client demand. Travel will not exceed 25%.
• Strong interest in working directly with clients and developing a career in cybersecurity advisory and assessments.
• Be legally authorized to work in the United States.

Highly Desired

Credit union experience is a significant advantage.

Experience working directly for a credit union, a CUSO, or a technology or security provider serving credit unions will help you get up to speed quickly., * Cybersecurity: 1 year (Required)

Language:

• English (Required)

• Competitive Base Salary: $60,000-$70,000 annually.
• Remote-First Work: Primarily remote work with opportunities to engage directly with clients onsite.
• 401(k) Retirement Plan: Company-provided 4% match, subject to plan terms.
• Health Insurance: Employer-sponsored health insurance.
• Paid Holidays: Ten company-observed holidays: New Year’s Day, Martin Luther King Jr. Day, Presidents Day, Memorial Day, Juneteenth, Independence Day, Labor Day, Columbus Day, Thanksgiving Day, and Christmas Day.
• Vacation and Sick Time: Paid leave in accordance with company policy.
• Professional Development: Access to training, webinars, certification planning, and industry conferences.
• Career Progression: A structured advancement path from Junior Analyst to Analyst to Senior Analyst.
• Mentorship: Direct training and support from experienced security assessors.
• Practical Experience: Exposure to client environments, security assessments, technical reviews, and onsite social engineering.

Benefits are subject to applicable plan eligibility and company policies.

Why Join Us?

You’ll have the opportunity to develop real-world cybersecurity assessment experience, work directly with financial institutions, and take ownership of engagements early in your career.

We’re looking for someone who wants to build their expertise, exercise sound judgment, and become a capable, independent security professional.

If that sounds like the kind of opportunity you’re looking for, we’d like to hear from you.

Job Type: Full-time

Pay: $60,000.00 - $70,000.00 per year, * 401(k)

• Dental insurance
• Health insurance
• Paid time off

Our organization is passionate about providing long term value to our clients through an outstanding customer experience and exceptional quality deliverables.

Our Team Members are our number one priority. We know that by taking care of our team our clients will be in good hands.

We are looking for high caliber team members looking to continually grow and push the envelope.

Stickley on Security works with banks, credit unions, and fintechs on cybersecurity, compliance, and risk. Our services include advisory, penetration testing, compliance programs, business continuity, and security awareness training.

Following our merger with VYFI, a credit union information security CUSO, credit unions remain central to our work.

This position is part of our Advisory team, which performs risk-based security and control assessments aligned with NCUA, FFIEC, NIST, and GLBA requirements.

We’re a small team, and the work you do directly impacts our clients.