SOC Analyst Jobs in North Carolina

Position Summary

The Clearing House is seeking an analytical and technically skilled Information Security Data Analyst to support cybersecurity risk reporting, data analysis, and performance measurement across the enterprise Information Security program.

This role is responsible for transforming complex cybersecurity data into accurate, actionable insights that support operational decision-making, risk management, regulatory oversight, and executive reporting.

The Information Security Data Analyst will work closely with Security Operations, Vulnerability Management, Identity and Access Management, Infrastructure, and Technology Risk teams to develop automated reporting, dashboards, and metrics that provide visibility into the organization's cybersecurity posture.

A key focus of this position will be vulnerability management analytics, including the analysis of vulnerability exposure, remediation performance, asset criticality, and compliance with established remediation timelines.

The ideal candidate combines strong data analytics capabilities with an understanding of cybersecurity concepts and can translate large volumes of technical information into clear, meaningful insights for technical teams and senior leadership.

About The Clearing House: The Clearing House Payments Company L.L.C. is a bank-owned industry utility that shapes the payments landscape and provides infrastructure for safe, reliable, and efficient payments. We see an economy where everyone is connected and a future where modern payments make life easier. The Clearing House operates four payment systems: a high-value wire-transfer system (the CHIPS® network), the country’s first and largest instant payments system (the RTP® network), an automated clearinghouse network (the EPN® network), and a check image exchange network (the Image Exchange Network). TCH also operates a bank account number tokenization service, runs a payments association known as the TCH Payments Authority, and maintains the rules for private-sector check image exchange through its ECCHO® business line.

Key Responsibilities

Cybersecurity Data Analytics & Reporting

• Collect, analyze, validate, and interpret cybersecurity data from multiple enterprise security platforms.
• Develop and maintain dashboards, reports, and analytical models that measure cybersecurity risk, operational effectiveness, and control performance.
• Transform complex technical data into clear, actionable insights for Information Security leadership, executive management, and risk committees.
• Identify trends, anomalies, emerging risks, and opportunities for improvement across cybersecurity operations.
• Establish repeatable reporting processes that improve accuracy, consistency, and timeliness.
• Automate data collection, transformation, reconciliation, and reporting to reduce manual effort.
• Support the development of cybersecurity key risk indicators (KRIs), key performance indicators (KPIs), and operational metrics.
• Maintain clear documentation of data sources, metric definitions, calculations, assumptions, and reporting methodologies.

Vulnerability Management Analytics

• Develop and maintain vulnerability reporting across on-premises infrastructure, cloud environments, applications, and enterprise platforms.
• Analyze vulnerability data from Tenable, ServiceNow Vulnerability Response, and other relevant security tools.
• Track critical and high-severity vulnerabilities, remediation timelines, aging, exceptions, and exposure beyond established service-level agreements.
• Correlate vulnerability findings with asset inventories, business criticality, ownership, and operational context to improve risk-based prioritization.
• Identify recurring vulnerabilities, remediation bottlenecks, data quality issues, and emerging exposure trends.
• Develop reporting that distinguishes newly discovered vulnerabilities from existing exposure, overdue remediation, and changes resulting from expanded scanning coverage.
• Partner with infrastructure and application teams to validate vulnerability data, identify remediation owners, and improve reporting accuracy.
• Support vulnerability governance meetings through preparation of metrics, trend analysis, and executive-level reporting.
• Develop analytical capabilities to measure remediation progress and assess the effectiveness of vulnerability management activities.

Security Metrics & Risk Reporting

• Support the design, development, and maintenance of Information Security KRIs and KPIs aligned with enterprise risk management requirements.
• Produce recurring cybersecurity reporting for executive leadership, risk committees, and other governance forums.
• Analyze trends in security incidents, vulnerability exposure, identity controls, security monitoring, and remediation effectiveness.
• Establish consistent calculation methodologies, reporting thresholds, and data quality controls.
• Investigate unexpected changes in metrics and distinguish actual risk increases from changes in detection capabilities, scanning coverage, or data sources.
• Partner with Technology Risk and other stakeholders to ensure reporting is accurate, traceable, and aligned with approved risk definitions.
• Prepare supporting analysis and evidence for internal audits, regulatory examinations, and management reviews.
• Develop historical trending and comparative analysis to help leadership evaluate the effectiveness of security investments and operational improvements.

Data Integration, Automation & Visualization

• Develop automated data pipelines and reporting solutions using SQL, Python, Power BI, APIs, and other approved enterprise technologies.
• Integrate data from cybersecurity platforms and cloud security tools.
• Build interactive dashboards that allow stakeholders to analyze security metrics by business service, asset criticality, technology platform, ownership, and risk category.
• Perform data cleansing, normalization, reconciliation, and validation across multiple systems.
• Identify inconsistencies between security tools and authoritative asset or configuration management data.
• Create reusable datasets, reporting templates, and standardized analytical models.
• Work with technology teams to improve data accessibility, reliability, and reporting automation.
• Apply appropriate data access controls and handling practices to sensitive cybersecurity information.

Data Quality & Continuous Improvement

• Establish controls to ensure cybersecurity reporting is complete, accurate, consistent, and reproducible.
• Document data lineage, business rules, transformations, and calculation logic supporting key security metrics.
• Investigate data discrepancies and collaborate with system owners to resolve underlying issues.
• Identify opportunities to simplify reporting processes and eliminate redundant or manual activities.
• Develop quality assurance checks to detect missing records, duplicate findings, incorrect asset classifications, and inconsistent remediation statuses.
• Recommend improvements to cybersecurity data models, reporting architecture, and analytical capabilities.
• Support continuous improvement initiatives that strengthen the organization's ability to measure and manage cybersecurity risk.

Cross-Functional Collaboration

• Partner with Information Security teams to understand operational processes, reporting requirements, and cybersecurity risk drivers.
• Collaborate with Infrastructure, Cloud Engineering, Application Development, Enterprise Architecture, and Technology Risk teams.
• Translate technical findings into concise summaries that communicate business impact and recommended actions.
• Support leadership in responding to ad hoc analytical requests, regulatory inquiries, and emerging cybersecurity issues.
• Present analytical findings and explain trends, assumptions, and limitations to technical and nontechnical stakeholders.

Required Qualifications

• Bachelor's degree in Data Analytics, Computer Science, Information Systems, Cybersecurity, Mathematics, Statistics, or a related discipline, or equivalent professional experience.
• Strong proficiency in SQL, including querying, joining, aggregating, and analyzing large datasets.
• Experience using Python, PowerShell, or similar scripting languages for data analysis and automation.
• Experience developing dashboards and reports using Microsoft Power BI, Tableau, or comparable business intelligence platforms.
• Advanced Microsoft Excel skills, including pivot tables, data transformation, formulas, and analytical reporting.
• Experience integrating and analyzing data from multiple enterprise systems using APIs, databases, or automated data extracts.
• Understanding of cybersecurity concepts, including vulnerabilities, asset management, security incidents, risk ratings, and remediation processes.
• Strong analytical and problem-solving skills with demonstrated ability to identify trends, anomalies, and data inconsistencies.
• Experience developing metrics, performance indicators, and recurring management reports.
• Ability to communicate complex analytical findings clearly to technical and nontechnical audiences.
• Strong attention to detail, organizational skills, and ability to manage multiple reporting requirements.
• Must be legally authorized to work in the United States.

Preferred Qualifications

• Experience working in banking, financial services, payment systems, or another highly regulated industry.
• Experience analyzing vulnerability data and familiarity with security platforms.
• Understanding of vulnerability severity ratings, CVSS, CISA Known Exploited Vulnerabilities (KEV), and risk-based vulnerability prioritization.
• Familiarity with cybersecurity frameworks and regulatory expectations, including NIST CSF, FFIEC guidance, and relevant financial services requirements.
• Experience developing executive dashboards and reporting for risk committees or senior management.
• Knowledge of statistical analysis, trend forecasting, data modeling, and data visualization best practices.
Relevant certifications such as Microsoft Power BI Data Analyst, CompTIA Security+, or other data analytics or cybersecurity certifications.

Physical Demands and Work Environment: The working environment is generally favorable. Lighting and temperature are adequate, and there are no hazardous or unpleasant conditions caused by noise, dust, etc. Work is generally performed within an office environment, with standard office equipment available. Travel may be required. Candidates will report to the office three days each week. Onsite work requirements may change at any time.