> Markdown version of [/jobs/ext/4289858-information-security-analyst-jr](https://www.wearedevelopers.com/jobs/ext/4289858-information-security-analyst-jr). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Analyst - JR

- **Company:** PHO VY, LLC
- **Location:** United States (Remote available)
- **Experience:** Starter
- **Salary:** $60,000 - $70,000
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Data Integrity, Identity and Access Management, Information Technology Audit, Virtual Private Networks (VPN), Virtual Environment, Firewalls (Computer Science), National Institute of Standards and Technology Cybersecurity Framework, Information Technology, CIS Benchmarks
- **Published:** October 26, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=d0e9fce5ac5b28b2

## About the Role

* At least one year of experience in information security, IT audit, governance, risk and compliance (GRC), or a related IT role.
 * Some practical exposure to cybersecurity assessments, audits, or compliance activities.
 * Understanding of fundamental information security concepts and controls.
 * Familiarity with technical, administrative, and physical security safeguards.
 * Strong written and verbal communication skills, including the ability to explain technical issues to nontechnical stakeholders.
 * Strong analytical skills, attention to detail, and the ability to manage competing priorities.
 * Self-motivation, curiosity, and a willingness to take ownership of assigned work.
 * Ability to work independently in a remote environment once trained.
 * Confidence and professionalism when interacting directly with clients.

A degree in cybersecurity, computer science, or a related discipline is a plus, but not required.

Security+ or a comparable entry-level cybersecurity certification is also a plus., * Be a team player with a positive attitude.

 * Willingness to travel domestically, typically about once per month, with occasional increases based on client demand. Travel will not exceed 25%.
 * Strong interest in working directly with clients and developing a career in cybersecurity advisory and assessments.
 * Be legally authorized to work in the United States.

Highly Desired

Credit union experience is a significant advantage.

Experience working directly for a credit union, a CUSO, or a technology or security provider serving credit unions will help you get up to speed quickly., * Cybersecurity: 1 year (Required)

Language:

 * English (Required)

## Description

This is an early-career position with real responsibility and a clear path for growth.

You'll conduct information security assessments for smaller credit unions, covering information security, privacy, business continuity, identity management, user access, data integrity, and related controls.

Most of your work will be remote, including evidence review, analysis, client meetings, and report writing. You'll also travel to client locations for onsite assessment activities, including limited physical security testing and social engineering.

We don't expect you to know everything on day one. We do expect you to be ready to learn and apply what you learn.

You'll start by shadowing experienced assessors on several engagements. Next, you'll take the lead while a senior analyst provides oversight. As your capabilities develop, you'll begin managing engagements independently.

We have a defined progression from Junior Analyst to Analyst to Senior Analyst, with established competencies and compensation bands at each level.

What You'll Do

 * Conduct information security assessments for smaller credit unions, primarily aligned with NCUA guidance.
 * Manage assigned assessments from kickoff through final reporting as your experience develops.
 * Review evidence, evaluate security practices, conduct client interviews, and document findings.
 * Assess technical, administrative, and physical security controls.
 * Perform limited onsite social engineering and physical security testing.
 * Identify security risks, control gaps, and opportunities for improvement.
 * Prepare clear, accurate, actionable assessment reports following internal standards.
 * Manage engagement timelines, deliverables, and client communications.
 * Develop proficiency with NIST CSF, CIS Controls v8, NCUA ISE, and other applicable assessment frameworks.
 * Expand into additional technical assessments, including firewall, VPN, and virtual environment reviews.
 * Continue developing your knowledge through research, training, and professional certifications.