Cybersecurity Governance and Risk Analyst

Job Description

JOB INFORMATION

Title:

Cybersecurity Governance and Risk Analyst

Officer Title:

Grade:

27

FLSA Classification:

Exempt

Date Last Edited:

8/14/2026

Reports To:

Senior Cybersecurity Governance Risk Analyst

Department:

Cybersecurity Governance and Risk

URL Link

https://hvfcu.jdxpert.com/ShowJob.aspx?EntityID=2&jobcode=1297

PRIMARY FUNCTION

Collaborates with internal and external partners to design and implement a robust Cybersecurity Governance framework tailored to Hudson Valley Credit Union's strategic objectives. This includes developing policies, standards, and best practices that advance organizational Cybersecurity Governance maturity. Conducts ongoing assessments of Cybersecurity Governance maturity in partnership with cross-functional stakeholders, ensuring all processes align with industry-recognized frameworks such as NIST. Continuously monitors, measures, and enhances Cybersecurity Governance activities to drive measurable improvements, ensuring regulatory compliance and maintaining the ongoing integrity and security of the organization.

•

Develops and maintains a comprehensive Cybersecurity management vision for Hudson Valley Credit Union, establishing strategic roadmaps for data governance that align with organizational goals and maximize member value.

•

Engages with data stakeholders across departments, facilitating communication and collaboration to ensure the effective implementation of Cybersecurity governance standards and promote a culture of accountability.

•

Brings advanced expertise in governance technologies, guiding teams in the design, implementation, and optimization of scalable solutions that support Cybersecurity Governance & Risk frameworks.

•

Champions cybersecurity practices, embedding compliance, ethical standards, and governance throughout all management processes. Collaborate with legal and compliance teams to address data privacy, regulatory obligations, and ethical considerations.

•

Prioritizes the needs of members, and internal stakeholders in all Cybersecurity governance initiatives, leveraging research and analytics to enhance the impact of data-driven solutions and improve user experience.

•

Stays current with advancements in Cybersecurity governance, and evolving regulatory landscapes, promoting professional development and fostering innovation in all Cybersecurity Governance activities.

•

Adhere to all Credit Union policies, procedures, and regulatory agency requirements. Participate in all required and recommended training and development including, but not limited to, Bank Secrecy Act training (BSA) and demonstrate attained knowledge. Participate on Credit Union teams, projects and strategic initiatives when the opportunity arises. Perform additional duties and special projects as assigned.

•

Embrace and apply HVCU’s guiding principles to all activities and responsibilities. This includes the Credit Union’s Mission, Vision, Core Values, Employee and Member Value Propositions, Sales and Service Model, and commitment to Lean Six Sigma practices. Support the Credit Union’s initiatives by demonstrating teamwork and professionalism.

•

Responsible for regular and predictable attendance including punctuality.

Bachelor’s Degree or at least 2 years equivalent experience for each undergraduate year not completed; undergraduate degree cannot substitute for minimum number of years of experience.

Information security, Computer Science, Information Management, or related field

X

Relevant certifications recommended: NIST RMF Training or Certificate, ISO/IEC 27001, CISSP, CRISC, CISM, CISA.

X

Minimum 3 Years

prior experience in cybersecurity governance & risk. 

X

•

Excellent verbal and written communication skills with the ability to influence at all levels.

•

Demonstrated collaboration with cross-functional teams: partnering with IT, Infosec, QA, legal, compliance, privacy teams, and external stakeholders to strengthen governance policies and practices.

•

Up-to-date knowledge of emerging trends in cybersecurity governance, risk management and compliance requirements.

•

Knowledge of data privacy and security technologies, including encryption and anonymization.

•

Familiarity with risk management frameworks (COBIT, FAIR) and compliance standards.

•

Ability to use business intelligence and analytics tools (Power BI, Tableau, SAS, etc.)

•

Advanced analytical, problem-solving, and organizational skills.

PHYSICAL DEMANDS

Frequency

Physical Demand

Weight (lbs.)

Frequently

Sit for prolonged periods of time

Frequently

Required to communicate verbally

Constantly

Normal range of vision and hearing abilities required

Occasionally

Lift and/or move objects

10

Occasionally

Travel outside of work location to attend meetings and training programs

Frequently

Required to skillfully operate a computer, telephone and other standard office equipment

WORK ENVIRONMENT

•

Typically the noise level in the work environment is low to moderate.

•

May experience occasional job stress in response to job demands.

•

High energy, high impact atmosphere.

•

Standard office equipment including, but not limited to, a computer, telephone, copy/fax machines, etc.

•

There are no significant hazardous conditions.

View Competencies

Service Excellence

Consistently incorporates Hudson Valley's member and employee value proposition, reinforcing organizational culture and brand differentiators.

Level 3

1. Creates a sense of accountability and personal ownership for employees and self.

2. Designs strategies to inspire peers and business unit to raise the bar of customer service delivery.

3. Establishes best practices for internal and external service excellence.

4. Monitors industry for trends in enhancing member service with special attention to financial services.

5. Systematically identifies potential problems when designing systems/processes using techniques including brainstorming and cost/benefit analyses to reduce the chances of unnecessary problems.

Results Driven

Drives critical activities to completion. Meets organizational goals and customer expectations.

Level 2

1. Clearly communicates expected results. Uses motivational tactics to generate team buy in. Consistently measures progress and refocuses efforts to ensure attainment.  2. Implements specific policies or practices based on laws or regulations governing these practices.  3. Makes effective use of technology to achieve results. Ensures access to and security of technology systems.  4. Takes full responsibility for results, keeping stakeholders properly informed of status, issues and potential problems.  5. Understands the organizations influence dynamics and uses that information to establish alliances to achieve organizational goals and objectives.

Resiliency

Adapts positively to changing environments in order to achieve business results.

Level 3

1. Encourages new ideas and innovations; designs and implements new or cutting edge programs/processes.  2. Establishes programs that result in continuous improvement through innovation and lean thinking.   3. Guides others to understand and accept change more readily. Directs team through ambiguity to ensure ongoing success.   4. Leads a continuous cycle of innovation that incorporates feedback and lean thinking to improve future initiatives.  5. Remains in touch with the evolving needs and demands of the market and looks for trends and new ideas that might affect the organization.

Strategic Visioning

Takes a long-term view and builds a shared vision within the organization; acts as a catalyst for organizational change. Influences others to translate vision into action.

Level 2

1. Cultivates effective cross-boundary relationships focused on shared strategic interests.  2. Deals quickly with lack of alignment to ensure agreed upon strategy is integrated into planning process.  3. Enrolls stakeholders in communicating and coordinating activities to support the organization's vision and strategies.  4. Identifies the critical interdependencies among system elements that help and hinder performance.  5. Influences the manner in which business decisions are made in the organization

Communication

Provides information and messages in a way that produces clarity and impact.

Level 3

1. Develops a clear, complete understanding of needs and problems through careful listening, probing, reflecting, and summarizing.

2. Conducts discussions that are sincere and fully expressed.

3. Delivers written and oral communications that engage audience participants, respond to their questions and concerns, and produce specific outcomes and impact.

4. Reviews others' communications for substance, editorial quality, and visual quality.

5. Develops team members' ability to develop a communication plan or strategy.

6. Develops team members' writing and speaking skills.

This job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee in this position.  Additional functions and requirements may be assigned by supervisors as deemed appropriate, with or without notice.

Nothing contained in this material creates a contract of employment between an employee and Hudson Valley Federal Credit Union or otherwise alters the at-will nature of the employment relationship.

Are you able to perform the essential functions listed in this job description with or without reasonable accommodation?  YES_______  NO_______

By signing below you certify that you have received this job description and understand the requirements, essential functions and duties of the position.  If you are currently employed in this position, your signature acknowledge that this job description accurately describes the position, including its essential functions.

Name:  _____________________________________________

Signature: _____________________________________________

Date:  _____________________________________________ 

Please also note that Hudson Valley Federal Credit Union respects the religious beliefs and practices of employees and will, on request, reasonably accommodate its employees when a reasonable accommodation is available that does not create an undue hardship on the Credit Union’s business.  Therefore, unavailability for work due to religious observances or practices may not be a bar to employment.