Information Security Risk Analyst

Full-Time | Remote within the US

Overview

If you're like us, you're tired of having a normal job.

You're looking for something bigger. Something that means more than just a 9-5.

You want to look back at the end of your career and be able to say, “Wow, we really made people's lives better with our work.”

You are self-motivated and self-disciplined and are looking for the freedom that comes from working at home.

If this sounds like you, then you might be one of us.

We're always looking for amazing people to join our team. And this is an opportunity for you to do just that.

We are a growing cybersecurity consulting firm that specializes in Virtual Chief Information Security Officer (vCISO) services exclusively in the banking industry. Basically, that means we help our clients manage cybersecurity as high level, high touch consultants.   We've been in business since early 2015 and have been experiencing solid growth every year since.

This is the opportunity to be a part of building an excellent company in an exciting field.

If cyber security is exciting to you, but feels a little daunting, that's okay. We will teach you our methodology and processes. But to do that, we do require some experience for this position. Because we work exclusively in the financial institution space, we're looking for someone that has at least a year or 2 of banking or credit union experience in any of the following areas:

• information technology
• cybersecurity
• information security
• risk management
• compliance
• audit
• operations

It's okay if that experience comes in a small community financial institution with only a handful of locations or a large regional bank or corporate credit union.

There's a position description below, but to get down to it, this role is a liaison and coordinator with our clients and the Senior Virtual CISO to keep our clients’ information security programs on track.

You’ll get to work with a team of Senior vCISO Advisors that is among the best. The knowledge and experience you will gain in this position are invaluable.

To be successful, this position requires the following skills:

• Excellent communication skills, including verbal, written, video conferencing, etc.
• Strong ability in the Microsoft O365 suite (Excel, Word, SharePoint, Outlook)
• Basic project management capabilities, including scheduling, prioritizing, managing deadlines, etc.

And the following intangibles:

• Flexible and adaptable attitude
• Service-minded approach
• Desire and willingness to learn

Qualified candidates should submit a PDF resume along with a brief cover letter describing their interest in this position and why they’d be a good fit.

PLEASE: No phone calls

Position Description

Information Security Risk Analyst

Reports to: VP, COO and Operations Manager 

Designation: Permanent Full Time 

Basis: At-Will; Salaried (Paid over 24 pay periods on the 1st and 15th of each month on a 1-period delay) 

Location: Remote office (work from home; see travel) 

Work Schedule: 40-Hour Base; Flexible; Deadline oriented; Typically M-F; Schedule will need to align and coordinate with customers and is likely to vary depending on project load and other factors 

Salary Range: $40,000 - $80,000

Last Revised: March 13, 2025

Description 

This entry-to-mid level position is responsible for the day-to-day management of information security program deliverables for community banks and credit unions using the Bedel Security methodology.  The Information Security Analyst will work closely with and under the direct supervision of the vCISO Senior Advisor to achieve customer satisfaction as well as other internal objectives. 

Requirements 

1. Service-first attitude 
2. Excellent written and verbal communication skills 
3. Eagerness to independently learn in the following areas: 
   1. Compliance 
   2. Technology 
   3. Banking 
   4. Cybersecurity 
   5. Ability to prioritize 

Experience 

At minimum 1-2 years in any bank or credit union in one of the following areas: 

• Information Security 

• Information Technology 

• Risk Management 

• Compliance 

• Audit 

• Operations 

Education 

While an associate degree or above is required, candidates will be primarily considered based on skills and personality, rather than on education and degrees. 

Certifications 

None required 

Travel 

This position will require infrequent overnight travel (<10 nights per year) as necessary to handle customer projects, conferences, or to be onsite for other various company meetings. 

Non-Disclosure & Non-Compete 

This position requires agreement with and adherence to the following promises: 

• Non-disclosure of client information and/or NPI/PII 

• Non-disclosure of sensitive information internal to Bedel Security 

• Non-compete with our Virtual CISO services for 1 year after termination; this means: 

• You won’t be employed by, contracted by, or owner of another entity that either offers or is planning to offer Virtual CISO services for financial institutions. 
• You won’t work for, or contact for solicitation, any Bedel Security clients. 
  
  

Position Duties 

1. Directly manage and oversee the information security and cybersecurity programs for assigned customers. 
   1. Manage cybersecurity or compliance related tasks and projects for customers. Including, but not limited to: 
      1. Risk Management 
      2. Governance 
      3. DR/BCP 
      4. Policies 
      5. Incident Response 
      6. Third Party Management 
      7. Monitoring and Oversight 
      8. IT Change Management  
      9. ID Theft Red Flags  
      10. Audit and Exam Preparation     
   2. Collaborate with other Analysts and Advisors in strategy and problem solving for both in-house and customer-based projects 
   3. Provide process improvement suggestions for delivery of services 
   4. Perform Quality Assurance Reviews for work of other Analysts and Advisors 
   5. Participate in meetings; create and post minutes where necessary 
   6. Thoroughly document status, deadlines, notes, and updates to intranet  
   7. Track time and activities via project management tool 
   8. Review upcoming events in project management tool and summarize for vCISO Senior Advisor to plan for customer needs 
   9. Research trends in cybersecurity and share with Analysts, Advisors, and customers 
   10. Share articles, blogs, and other resources on LinkedIn and other social media 
   11. Attend various conferences as a representative of the company 
   12. Perform upfront and ongoing cyber health assessments for prospects and customers