Senior Information Security Analyst

Position : Senior Information Security Analyst

Location : Hybrid

Shift : 3 days in office

Duration : PERM

Salary : 90-100k year

This role is responsible for leading and supporting key security initiatives that protect sensitive financial data, ensure regulatory compliance, and maintain the integrity of enterprise-level systems. The ideal candidate will have a strong background in information security, with experience in identity and access management, threat detection, incident response, and network security.

Day to Day

Manage the implementation and development of security solutions.

Evaluate and deploy technologies to mitigate risks and ensure compliance with financial regulations.

Support the vulnerability management program, including remediation coordination and reporting.

Monitor system logs, SIEM tools, and network traffic for suspicious activity.

Coordinate incident response, perform forensic analysis, and recommend improvements.

Conduct security reviews of network architecture and assess risks.

Document firewall rules and escalate unresolved exposures or noncompliance.

Conduct audits of endpoint, network, and system security controls.

Ensure alignment with financial regulations such as PCI-DSS, GLBA, and FFIEC.

Manage the Data Loss Prevention (DLP) program.

Generate reports and metrics to measure effectiveness.

Work with monitoring and response teams to identify new threats.

Assist and mentor junior team members in security tools and processes.

Qualifications

• 3-5 years similar or related experience in Information Security, ideally at the enterprise level.
• Bachelor's degree in information security, Computer Science.
• Experience in financial services or a regulated industry
• Strong understanding of financial regulations and compliance frameworks (e.g., PCI-DSS, GLBA, FFIEC)
• Technical understanding with a wide range of security-related systems and applications, including :
• Vulnerability assessment tools
• Endpoint protection solutions
• Proxy servers
• Security Information and Event Management (SIEM) systems
• Data Loss Prevention (DLP) technologies
• Active Directory
• Identity and Access Management (IAM) platforms
• Permissions and access control management