JCW has partnered with a leading global corporate and investment bank seeking an Information Security Analyst to join their New York office. This person will serve as a key member of the information security team, responsible for recommending and implementing security controls, supporting incident response, conducting risk assessments, and ensuring compliance with regulatory frameworks across the organization.
The ideal candidate is a well-rounded information security professional with a strong grasp of both technical controls and regulatory requirements. You have hands-on experience with SIEM, IDS/IPS, PAM, and DLP tools, and you understand what it means to operate in a heavily regulated financial services environment. You are equally comfortable engaging with technical teams and communicating risk to senior management.
Key Qualifications:
- 3 to 5 years of information security experience or a combination of IT system administration and security
- Strong knowledge of Information Security Standards and Frameworks including NIST CSF, NIST 800-53, SANS, ISO, SOX, CIS, and FFIEC
- Understanding of DFS 500 Cybersecurity Regulation and federal, state, and local data privacy regulations
- Working knowledge of SIEM, IDS/IPS, WAF, PAM, SSL, DNS, and DLP tools and technologies
- Experience conducting risk assessments, penetration testing coordination, and vendor security reviews
- Experience supporting incident response and security operations center functions
- Understanding of hardened operating system images, email filtering, and OWASP standards
If this sounds like you feel free to apply!