Job Description

Job Description

Job Description

Role: Junior Information Security Analyst (Non-Exempt)

Location: New York City (Downtown Financial District)

Purpose of Role:

The Junior Information Security Analyst plays a critical role in supporting the organization's information security and risk management initiatives. This position is designed to assist in safeguarding sensitive information and ensuring compliance with relevant cybersecurity regulations and standards. By conducting assessments, managing third-party risks, and participating in training and policy development, the Junior Analyst contributes to the overall security posture of the organization. This role fosters a culture of awareness and vigilance against potential threats.

Major Responsibilities:

• Manage and respond to confirmation requests from financial institutions, ensuring timely and accurate communication.
• Assist in conducting IT/IS Risk Assessments and Internal Audits.
• Support the review, revision, compilation, and maintenance of Information Security (IS) policies and procedures, including documentation for the Information Security Steering Committee (ISSC) and sections for Management Information System (MIS) reports.
• Assist in managing third-party information security risks by participating in vendor evaluations and software assessments.
• Develop a foundational understanding of relevant Cybersecurity regulations and standards, such as NYDFS Part 500, FFIEC, and NIST.
• Participate in cybersecurity awareness training sessions for general users, providing support for uploads and addressing questions or issues.
• Assist in drafting, reviewing, and revising IS policies and procedures.
• Contribute to vendor reviews and evaluations, including partnerships such as Equinix.
• Assist in confirming ownership of official email accounts and report findings regarding local account ownership.
• Prepare materials for ISSC meetings; Attend ISSC quarterly meetings and take meeting minutes
• Providing reminders for encryption awareness training.
• Support monthly monitoring of system administration activities for the Privileged Account Review.
• Help summarize MIS reports and participate in monthly reviews of official email reports.
• Assist in investigating and analyzing RPQS reports.
• Provide support for ad hoc projects and approvals as needed.
• Coordinate communication with the Head Office departments and relevant stakeholders on internal and external auditing matters.

Skills, Competencies and Experience Preferred:

• An Associate or Bachelor’s degree is preferred but not required
• Strong attention to detail and excellent organizational skills.
• A strong interest in information security, with a willingness to learn and grow in the field.
• Basic knowledge of Identity Access and Management (IAM) is preferred but not required.
• Bilingual proficiency in English and Mandarin is preferred but not required.
• Effective communication and interpersonal skills, with the ability to work collaboratively.

Job Tags

Similar Jobs