{"id":3498315,"url":"https://alion.io/job/the-clearing-house-information-security-data-analyst","title":"Information Security Data Analyst","company":{"id":1837928,"name":"The Clearing House","domain":"theclearinghouse.org","url":"https://alion.io/company/theclearinghouse-org","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":88,"open_postings":4,"ghost_share":0,"stale_share":0.5,"repost_share":0,"time_to_fill_p50_days":42,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Charlotte, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":93000,"max_usd":212000,"period":"year","method":"role_country_seniority_unknown","sample_n":3638},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Microsoft Excel","optional":false},{"name":"Power BI","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"ServiceNow","optional":false},{"name":"SQL","optional":false},{"name":"Tableau","optional":false},{"name":"CVSS","optional":true},{"name":"KEV","optional":true},{"name":"NIST CSF","optional":true}],"status":"live","first_seen_at":"2026-10-29T00:00:00Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-04T08:00:42Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"Position Summary\nThe Clearing House is seeking an analytical and technically skilled Information Security Data Analyst to support cybersecurity risk reporting, data analysis, and performance measurement across the enterprise Information Security program.\nThis role is responsible for transforming complex cybersecurity data into accurate, actionable insights that support operational decision-making, risk management, regulatory oversight, and executive reporting.\nThe Information Security Data Analyst will work closely with Security Operations, Vulnerability Management, Identity and Access Management, Infrastructure, and Technology Risk teams to develop automated reporting, dashboards, and metrics that provide visibility into the organization's cybersecurity posture.\nA key focus of this position will be vulnerability management analytics, including the analysis of vulnerability exposure, remediation performance, asset criticality, and compliance with established remediation timelines.\nThe ideal candidate combines strong data analytics capabilities with an understanding of cybersecurity concepts and can translate large volumes of technical information into clear, meaningful insights for technical teams and senior leadership.\nAbout The Clearing House: The Clearing House Payments Company L.L.C. is a bank-owned industry utility that shapes the payments landscape and provides infrastructure for safe, reliable, and efficient payments. We see an economy where everyone is connected and a future where modern payments make life easier. The Clearing House operates four payment systems: a high-value wire-transfer system (the CHIPS® network), the country’s first and largest instant payments system (the RTP® network), an automated clearinghouse network (the EPN® network), and a check image exchange network (the Image Exchange Network). TCH also operates a bank account number tokenization service, runs a payments association known as the TCH Payments Authority, and maintains the rules for private-sector check image exchange through its ECCHO® business line.\nKey Responsibilities\nCybersecurity Data Analytics & Reporting\nCollect, analyze, validate, and interpret cybersecurity data from multiple enterprise security platforms.\nDevelop and maintain dashboards, reports, and analytical models that measure cybersecurity risk, operational effectiveness, and control performance.\nTransform complex technical data into clear, actionable insights for Information Security leadership, executive management, and risk committees.\nIdentify trends, anomalies, emerging risks, and opportunities for improvement across cybersecurity operations.\nEstablish repeatable reporting processes that improve accuracy, consistency, and timeliness.\nAutomate data collection, transformation, reconciliation, and reporting to reduce manual effort.\nSupport the development of cybersecurity key risk indicators (KRIs), key performance indicators (KPIs), and operational metrics.\nMaintain clear documentation of data sources, metric definitions, calculations, assumptions, and reporting methodologies.\nVulnerability Management Analytics\nDevelop and maintain vulnerability reporting across on-premises infrastructure, cloud environments, applications, and enterprise platforms.\nAnalyze vulnerability data from Tenable, ServiceNow Vulnerability Response, and other relevant security tools.\nTrack critical and high-severity vulnerabilities, remediation timelines, aging, exceptions, and exposure beyond established service-level agreements.\nCorrelate vulnerability findings with asset inventories, business criticality, ownership, and operational context to improve risk-based prioritization.\nIdentify recurring vulnerabilities, remediation bottlenecks, data quality issues, and emerging exposure trends.\nDevelop reporting that distinguishes newly discovered vulnerabilities from existing exposure, overdue remediation, and changes resulting from expanded scanning coverage.\nPartner with infrastructure and application teams to validate vulnerability data, identify remediation owners, and improve reporting accuracy.\nSupport vulnerability governance meetings through preparation of metrics, trend analysis, and executive-level reporting.\nDevelop analytical capabilities to measure remediation progress and assess the effectiveness of vulnerability management activities.\nSecurity Metrics & Risk Reporting\nSupport the design, development, and maintenance of Information Security KRIs and KPIs aligned with enterprise risk management requirements.\nProduce recurring cybersecurity reporting for executive leadership, risk committees, and other governance forums.\nAnalyze trends in security incidents, vulnerability exposure, identity controls, security monitoring, and remediation effectiveness.\nEstablish consistent calculation methodologies, reporting thresholds, and data quality controls.\nInvestigate unexpected changes in metrics and distinguish actual risk increases from changes in detection capabilities, scanning coverage, or data sources.\nPartner with Technology Risk and other stakeholders to ensure reporting is accurate, traceable, and aligned with approved risk definitions.\nPrepare supporting analysis and evidence for internal audits, regulatory examinations, and management reviews.\nDevelop historical trending and comparative analysis to help leadership evaluate the effectiveness of security investments and operational improvements.\nData Integration, Automation & Visualization\nDevelop automated data pipelines and reporting solutions using SQL, Python, Power BI, APIs, and other approved enterprise technologies.\nIntegrate data from cybersecurity platforms and cloud security tools.\nBuild interactive dashboards that allow stakeholders to analyze security metrics by business service, asset criticality, technology platform, ownership, and risk category.\nPerform data cleansing, normalization, reconciliation, and validation across multiple systems.\nIdentify inconsistencies between security tools and authoritative asset or configuration management data.\nCreate reusable datasets, reporting templates, and standardized analytical models.\nWork with technology teams to improve data accessibility, reliability, and reporting automation.\nApply appropriate data access controls and handling practices to sensitive cybersecurity information.\nData Quality & Continuous Improvement\nEstablish controls to ensure cybersecurity reporting is complete, accurate, consistent, and reproducible.\nDocument data lineage, business rules, transformations, and calculation logic supporting key security metrics.\nInvestigate data discrepancies and collaborate with system owners to resolve underlying issues.\nIdentify opportunities to simplify reporting processes and eliminate redundant or manual activities.\nDevelop quality assurance checks to detect missing records, duplicate findings, incorrect asset classifications, and inconsistent remediation statuses.\nRecommend improvements to cybersecurity data models, reporting architecture, and analytical capabilities.\nSupport continuous improvement initiatives that strengthen the organization's ability to measure and manage cybersecurity risk.\nCross-Functional Collaboration\nPartner with Information Security teams to understand operational processes, reporting requirements, and cybersecurity risk drivers.\nCollaborate with Infrastructure, Cloud Engineering, Application Development, Enterprise Architecture, and Technology Risk teams.\nTranslate technical findings into concise summaries that communicate business impact and recommended actions.\nSupport leadership in responding to ad hoc analytical requests, regulatory inquiries, and emerging cybersecurity issues.\nPresent analytical findings and explain trends, assumptions, and limitations to technical and nontechnical stakeholders.\nRequired Qualifications\nBachelor's degree in Data Analytics, Computer Science, Information Systems, Cybersecurity, Mathematics, Statistics, or a related discipline, or equivalent professional experience.\nStrong proficiency in SQL, including querying, joining, aggregating, and analyzing large datasets.\nExperience using Python, PowerShell, or similar scripting languages for data analysis and automation.\nExperience developing dashboards and reports using Microsoft Power BI, Tableau, or comparable business intelligence platforms.\nAdvanced Microsoft Excel skills, including pivot tables, data transformation, formulas, and analytical reporting.\nExperience integrating and analyzing data from multiple enterprise systems using APIs, databases, or automated data extracts.\nUnderstanding of cybersecurity concepts, including vulnerabilities, asset management, security incidents, risk ratings, and remediation processes.\nStrong analytical and problem-solving skills with demonstrated ability to identify trends, anomalies, and data inconsistencies.\nExperience developing metrics, performance indicators, and recurring management reports.\nAbility to communicate complex analytical findings clearly to technical and nontechnical audiences.\nStrong attention to detail, organizational skills, and ability to manage multiple reporting requirements.\nMust be legally authorized to work in the United States.\nPreferred Qualifications\nExperience working in banking, financial services, payment systems, or another highly regulated industry.\nExperience analyzing vulnerability data and familiarity with security platforms.\nUnderstanding of vulnerability severity ratings, CVSS, CISA Known Exploited Vulnerabilities (KEV), and risk-based vulnerability prioritization.\nFamiliarity with cybersecurity frameworks and regulatory expectations, including NIST CSF, FFIEC guidance, and relevant financial services requirements.\nExperience developing executive dashboards and reporting for risk committees or senior management.\nKnowledge of statistical analysis, trend forecasting, data modeling, and data visualization best practices.\nRelevant certifications such as Microsoft Power BI Data Analyst, CompTIA Security+, or other data analytics or cybersecurity certifications.\nPhysical Demands and Work Environment: The working environment is generally favorable. Lighting and temperature are adequate, and there are no hazardous or unpleasant conditions caused by noise, dust, etc. Work is generally performed within an office environment, with standard office equipment available. Travel may be required. Candidates will report to the office three days each week. Onsite work requirements may change at any time.","description_format":"text","description_chars":10517,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Payment Processing & Gateways","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-30T02:35:42Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":6,"expected_fill_days":42,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/the-clearing-house-information-security-data-analyst","json_url":"https://alion.io/job/the-clearing-house-information-security-data-analyst.json","meta":{"generated_at":"2026-11-04T15:50:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24207,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1837928},"rest":"https://alion.io/mcp/rest/get_company?id=1837928"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fthe-clearing-house-information-security-data-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fthe-clearing-house-information-security-data-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fthe-clearing-house-information-security-data-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/the-clearing-house-information-security-data-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fthe-clearing-house-information-security-data-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3498315}},{"tool":"search_jobs","arguments":{"company":"theclearinghouse.org","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3498315},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}