Senior Information Security Analyst

Join our Govern & Control team as a Senior Information Security Analyst. In this role, you will own and mature the risk management processes that underpin our trust with clients, investors, and regulators. You will set standards for how the work is done, mentor other analysts, and act as a trusted advisor to stakeholders and leadership. This position requires expert-level depth in at least one security domain, strong command of security controls for cloud computing and third-party SaaS, and 6+ years of experience in security GRC, technology risk, technology audit, or security operations.

Responsibilities

• Lead and mature the risk management processes, ensuring compliance with regulations and industry standards.
• Conduct end-to-end risk assessment processes, documenting risk conclusions and setting templates for other analysts.
• Design and document complex internal controls, leveraging AI and automation tooling to scale the work.
• Expert-level depth in at least one security domain (for example vulnerability management, SDLC, application security, or cloud computing), paired with broad horizontal skills across the business. This is the "T-shaped" profile we expect at this level
• Strong command of security controls for cloud computing and third-party SaaS, including logical access management, third-party due diligence and ongoing monitoring, and vulnerability governance

Requirements

• Ability to use professional judgment and quantifiable methods to measure risk, and to drive stakeholders to sound risk acceptance or treatment decisions within appetite ("effective challenge")
• 6+ years of experience in security GRC, technology risk, technology audit, or security operations, including demonstrated senior-level ownership
• Moderate understanding of financial services operations and of Product/Engineering
• Deep, hands-on command of security risk management: the CIA triad, control design and operation, and one or more control governance frameworks (for example SOC 2, ISO 27001, NIST CSF)
• Experience learning and applying new skills quickly, including through research and the use of AI and automation
• Fluency in the structure and content of audit reports and risk assessments, including audit and assessment control testing with appropriate sampling and results reporting
• Strong cross-disciplinary communication and relationship building, with a track record of influencing without authority across Engineering, business, Compliance, and Legal
• We are seeking a senior team member who will be a force multiplier for the security program

Preferred

• Experience in regulated financial services, and with audits or regulatory examinations
• Professional designations such as CISSP, CISA, CISM, AWS Cloud certifications, or other (encouraged, not required)
• Experience mentoring analysts or auditors, or leading a governance committee

Pay

USD 170,000 - 185,000