Senior GRC Analyst

@ Patelco Credit Union

About Patelco Credit Union

Patelco Credit Union is a not-for-profit financial institution dedicated to building financial health and wellbeing for its members. Established in 1936, Patelco has grown to over $9 billion in assets and is the 7th largest credit union in California with branches throughout Northern California.

Overview

The Senior GRC Analyst is responsible for supporting and enhancing the Security Governance, Risk & Compliance program by identifying, assessing, and managing risks while ensuring adherence to internal policies, industry standards, and regulatory requirements. This role works with business and technology teams to strengthen risk management practices and maintain robust security and compliance frameworks.

Responsibilities

• Support and develop the Security GRC program.
• Establish and maintain security standards, documentations, and control objectives.
• Develop security control mappings aligned with relevant frameworks.
• Manage qualitative and quantitative IT/IS risk assessments.
• Monitor unresolved security issues and escalate when necessary.
• Collaborate with internal audit, compliance, and first line of defense teams.
• Track and report on Security Program metrics.
• Monitor regulatory changes affecting security programs.

Qualifications

• Bachelor’s degree in Information Technology or equivalent experience.
• Professional certifications in Information Security (CISSP, CISA, CRISC preferred).
• Minimum 10 years in Information Security with a focus on GRC.
• At least 5 years of Third Party Risk Management and IT/IS risk assessments experience.
• Strong understanding of various frameworks including NIST, PCI, ISO 27001, ISO 27005, FAIR, and OCTAVE.
• Experience in developing security documentation and guidelines.

Physical Activities/Requirements

This is a hybrid role based out of the Dublin Headquarters 3 days per week.

Compensation & Benefits

• Competitive base pay from $115,548 to $144,435 per year.
• Comprehensive medical, dental, vision, and life insurance benefits.
• Onsite fitness center and wellness rewards.
• 401(k) with 3% Safe Harbor and 5% employer match.
• Tuition reimbursement, internal transfer opportunities, and volunteer work.

Key skills/competency

• GRC
• Risk Management
• Security Compliance
• Governance
• Third Party Risk
• NIST
• ISO27001
• Audit
• Documentation
• Frameworks