First Entertainment Credit Union

Compliance

• Assist with the development, implementation, and ongoing improvement of the Information Security Governance Program. Which include maintaining information security policies, standards and procedures and coordinating annual reviews.
• Map policies and processes to framework such as NIST CSF, NIST 800-53, ISO 27001 and CIS controls.
• Support the maintenance of security policies, standards, and frameworks aligned with NIST CSF, NIST 800-53, CIS Controls, and ISO 27001.
• Collect and analyze cyber metrics, KRIs/KPIs, risk dashboards, and board-level reporting data.
• Prepare materials to help present cybersecurity posture, risks, and remediation strategies to the Board, Supervisory Committee, and Executive Leadership.
• Lead the Business Impact Assessment and BCP and Disaster Recovery process.
• Execute oversight for IT and applicable stakeholders.
• Conduct information security risk assessments as per process, aid in the risk evaluation of Application, Infrastructure, Cloud environments and Third-party vendors (evaluate SOC reports, security certifications, cyber security and penetration test reports.
• Perform control testing and help coordinate audit responses and remediation
• Help coordinate IT General Controls testing and Penetration Testing for First Ent.
• Work daily alerts and patch management and software updates/releases
• Track security incidents, document root cause and monitor remediation actions
• Board reporting on cyber health and Information security maturity
• Contribute to continuous improvement initiatives for cyber maturity (ACET/CAT).
• Performs other ERM/GRC duties in Operations, Compliance and Vendor Management as directed.

GRC InfoSec Analyst

• Support continuous improvement of GRC programs and ensure alignment with ERM strategy.
• Contribute to the development and maintenance of standardized GRC methodologies, templates, and documentation.
• Identify opportunities to streamline or automate risk and control activities.
• Support the risk self‑identification process and annual RCSA program through data collection and preparation.
• Partner with first‑line teams to document risks, controls, and issues accurately.
• Contribute to policy and procedure updates to ensure accuracy and regulatory alignment.
• Analyze lessons learned from issues, audits, and events to strengthen GRC practices.
• Oversee the issue‑management lifecycle for risk, audit and compliance findings, ensuring strong root‑cause analysis, effective corrective actions, and timely remediation.
• Translate incidents, losses, and near‑misses into actionable control enhancements.
• Monitor KRIs and control metrics, providing insights into residual risk and emerging trends.
• Develop executive and board‑level reporting on GRC maturity, RCSA results, issue trends, and overall risk posture.
• Support enterprise risk committees and governance forums with data‑driven insights and recommendations.
• Serve as second‑line lead for regulatory exams/audits and maintain exam‑ready documentation.
• Maintain exam‑ready documentation and ensure alignment with supervisory expectations (e.g., NCUA, OCC, Federal Reserve).

Senior GRC Analyst

Customer Retention Specialist

• Re-engage members through personalized outbound outreach while delivering consultative financial conversations to uncover needs and recommend relevant products that deepen engagement and wallet share.
• Gather and analyze member feedback and behavioral insights to identify trends and opportunities and use these insights to support the development of targeted engagement and retention initiatives for deposits and loans.
• Monitor member account activity and usage patterns to identify disengagement or churn risks, and proactively connect with at‑risk members to foster continued participation.
• Use segmentation strategies to prioritize outreach based on member behavior, lifecycle stage, product mix, and predicted churn indicators.
• Collaborate with internal partners to ensure alignment on communication strategies and to execute coordinated omnichannel engagement efforts across various channels.
• Own and track key engagement and retention KPIs, including product adoption, churn reduction, reactivation rates, and outreach conversion, to measure program effectiveness.
• Conduct timely follow-up with members after initial outreach to ensure their needs are met and to reinforce the Credit Union’s commitment to exceptional service.
• Prepare executive-ready summaries of engagement metrics to highlight program impact and make data-informed recommendations for improving retention strategies.

GRC InfoSec Analyst

Senior GRC Analyst

Member Engagement and Retention Specialist