Career Opportunity

Role Title

Information Security Analyst

Purpose of role

Information Security Analyst is a hands-on role that requires to work with all business units and other risk functions to identify security requirements by using methods that may include risk and business impact assessments. The person in this position is responsible of defining security configuration and operations standards for systems and applications, by conducting assessments and reviews of systems, networks and applications.

Job Description

Key Responsibilities

• Monitor systems, network and applications for security risks.
• Work with information security team to plan and enforce security requirements
• Report to management concerning residual risk, vulnerabilities and other security exposures, including misuse of information assets and noncompliance.
• Participate, Investigate, support and document cybersecurity incidents and breaches.
• Administer security tools to protect systems, networks and applications. This includes firewalls, Intrusion detections and prevention systems, security gateways etc.
• Assess security requirements and controls during the application development and acquisition process as defined in company’s security policies and standards.
• Perform vulnerability assessments and tests to uncover flaws and help technical teams to remediate identified vulnerabilities to maintain high security standards.
• Provide support to ongoing external and internal audits and audit remediation on information technology, including generating technical recommendations
• Develop and maintain security processes and procedures, and support service-level agreements (SLAs) to ensure that security controls are managed and maintained
  Create, manage and maintain user security awareness program
• Participate in user access provisioning and de provisioning activities to verify security controls are adhered
• Conduct security research in keeping abreast of latest security threat landscape and stay abreast with the current information technology trends
• Develop positive working relationships with various teams involved in security and privacy matters

Key Qualifications

• 5 years of related work experience
• Strong hands-on experience with tools such as: IDS/IPS, Metasploit, Nexpose, Nmap, Nessus, Wireshark, L0phtCrack, John the Ripper etc.
• In-depth knowledge and understanding of information risk concepts and principles, as a means of relating business needs to security controls
• Experience with common information security management frameworks, such as International Organization for Standardization (ISO) 27001, NIST Cybersecurity Framework. PCI DSS etc.
• Experience with penetration tests and techniques is preferred
• Proficiency in performing risk, business impact, control and vulnerability assessments
• Experience in developing, documenting and maintaining security policies, processes, procedures and standards
• Proficiency in network infrastructure, including routers, switches, firewalls, and the associated network protocols and concepts
• Audit, compliance or governance experience is preferred
• Strong analytical skills to analyze security requirements and relate them to appropriate security controls.
• Strong written and verbal communication skills.
• University degree required.
• Professional certification such as CISSP, CISA.

#LI-Hybrid

Salary Range:

$59,000.00 - $84,700.00

The actual base salary for this position will depend on several factors, including job-related skills, experience, and education. In addition to base pay, eligible employees may participate in a discretionary variable incentive plan, results are subject to both individual and company performance.

Please note that this posting is intended to fill an existing vacancy; however, there may be instances where more than one vacancy is available for the same role.

Equal Opportunity Employment and Inclusion – at Foresters Financial, we are committed to sustaining an equal opportunity environment for all job applicants. We embrace Inclusion, Diversity and Equity (IDE) as a core strategic objective for building strong, innovative teams in which all our employees can show up wholly and authentically as themselves.

Foresters Financial strives to provide an accessible candidate experience for prospective employees with different abilities. If you anticipate needing any type of accommodations during the recruitment process, please email [email protected] in advance of your appointment.

Thank you for choosing Foresters. Only those candidates who will be selected for further consideration will be contacted by our Talent Acquisition Team.