Information Governance, Risk & Compliance Analyst

Tinker Federal Credit Union’s IT Department has an immediate opening for an Information Governance, Risk, & Compliance Analyst . This is an exciting opportunity to join the largest and best credit union in Oklahoma! We offer competitive pay, a robust benefits package, a “smart casual dress code” and much more! We want you to work and grow at TFCU, so there will be many opportunities for professional development and growth through training and continued education. We value you at TFCU!

As an Information Governance, Risk, & Compliance Analyst , you will be responsible for the following:

• Supporting the development and implementation of comprehensive governance, risk, and compliance initiatives across the organization.
• Assisting with compliance initiatives, monitors regulatory requirements, assesses risks associated with information assets, and applies information security, data governance, and artificial intelligence (AI) governance principles to support policies, standards, risk assessments, control recommendations, and regulatory compliance efforts.

Salary Range:

This is an exempt position. The starting salary range Level I is $86,368.28 - $107,960.35, Level II is $106,414-$133,017, Level III is $131,113-$147,649; however, actual placement within the range will be determined individually based on your experience relative to organizational needs and internal salary equity.

Education/Experience:

• A bachelor’s degree in cybersecurity, information security, computer science, information systems, data governance, technology risk, technology compliance, or a related technology field is required for all levels. Applicable work experience and/or military experience may be substituted for education at the rate of two years of experience for one year of education.
• Level I: Three years of experience in information security, technology risk, technology compliance, data governance, privacy, information governance, or a closely related discipline, including experience working within a structured governance framework, is required. Financial institution experience is preferred.
• Level II: Five years of experience in information security, technology risk, technology compliance, data governance, privacy, information governance, or a closely related discipline, including experience working within a structured governance framework, is required. Financial institution experience is preferred.
• Level III: Seven years of experience in information security, technology risk, technology compliance, data governance, privacy, information governance, or a closely related discipline, including experience working within a structured governance framework, is required. Financial institution experience is preferred.

Certificates, Licenses, Registrations:

• Incumbent Bonding REQUIRED by TFCU’s chosen authority.
• Certifications:
  • Level I: Applicable information security or governance certifications preferred.
  • Level II: Applicable information security or governance certifications required (e.g., Security+, CC).
  • Level III: Top information security, governance, risk, compliance, privacy, or related certifications required (e.g., Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Information Privacy Professional (CIPP/US), AI Governance Professional (AIGP)).

Keys to success:

In order to be successful as an Information Governance, Risk, & Compliance Analyst you must possess these qualifications:

• Experience assessing and managing information risks while ensuring compliance with regulatory requirements, industry standards, and organizational policies.
• Proficient knowledge of information security governance, risk management, and technology compliance concepts, including policies, standards, controls, assessments, regulatory requirements, and reporting.
• General knowledge of data governance and AI governance concepts, including data protection, acceptable use, oversight, accountability, and risk management practices.
• Ability to influence and build consensus among peers and technology teams to achieve desired outcomes.
• Ability to analyze and interpret complex contractual requirements and apply them to operational practices and standards.
• Strong analytical, critical thinking, and problem-solving skills.