Senior Information Security Analyst

About Us:

We are a leading provider of governance, risk, and compliance services to the financial sector. Our team empowers clients to reimagine their GRC strategies and protect and grow their businesses.

Position Summary:

This role is responsible for assisting in coordinating and managing the execution of our information security framework, policy, and programs. The individual will work with our teams, department managers, staff, and vendors to develop, execute, and enforce information security standards that support our robust security program.

Key Responsibilities:

Develop and maintain corporate security policies, standards, and procedures to ensure compliance and operating efficiency.

Manage the annual review cycle and approval process for policies while proposing changes to existing policies and procedures to ensure regulatory compliance.

Oversee outsourced vendors providing information security functions to ensure compliance with contracted service-level agreements.

Recommend and coordinate the implementation of managerial and technical controls to support and enforce defined information security standards.

Manage the annual Information Security management program including Risk Assessments, Penetration tests, disaster recovery plan, and employee communication campaigns.

Perform ad-hoc work/special projects as needed to support our clients and internal initiatives.

Craft creative and practical solutions to problems and express those solutions through infrastructure as code.

Requirements:

Bachelor's Degree in a related field

Two years' professional experience in an Information Security role

Experience in Information Security Governance, Compliance, and Risk Management

Experience evaluating threat/risk landscapes and establishing best practices for security operations, governance, compliance, and audit

Knowledge of industry security concepts/frameworks and regulatory standards such as ISO-27001, NIST, HIPAA, PCI DSS, and CIS frameworks

PREFERRED QUALIFICATIONS:

Information Security Certifications (Comptia, ISC(2), ISACA)

AWS Security certification is a plus but not required

Essential Skills and Attributes:

Demonstrated professional integrity

Dependable, flexible, and adaptable to new initiatives and ever-changing client needs

Ability to work well in a fast-paced environment and collaborate with multiple colleagues/groups to deliver exceptional customer service

Strong written and verbal communication, presentation, client service, and critical thinking skills

Ability to exercise discretion and make independent judgments on matters of significance

Highly motivated and goal-oriented; pro-active in one's own education and career progression; volunteers for and shows initiative on both internal and external projects and tasks

Benefits:

We offer a competitive compensation package where you'll be rewarded based on your performance and recognized for the value you bring to our business. We provide medical coverage fully funded by us for employees and their families, access to maternity & fertility and wellness programs, personal accident insurance, group term life insurance, employee discount programs, and employee resource groups.

You'll enjoy time off for designated holidays, privilege leave, casual/sick leave, and other leaves of absence to support your physical, financial, and emotional well-being.

We're committed to a policy of nondiscrimination in all aspects of employment, including recruiting, hiring, placement, promotions, training, discipline, terminations, layoffs, transfers, leaves of absence, compensation, and all other terms and conditions of employment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or protected veteran status.