Information Security Analyst

LOCATION:

Boston, MA; New York, NY; Washington DC or Remote.

SUMMARY:

As the Information Security Analyst, reporting to the Manager of Information Security and Compliance, this position is responsible for assisting with the administration, and oversight of the firm’s Information Security Management System (ISMS), as well as other information security-centric initiatives related to compliance, risk management, data privacy, and protection strategies for the organization, in alignment with relevant laws, regulations, and industry standards. One of the key aspects of this role is participating in the vendor management process and compliance-related internal and external audits.

ESSENTIAL FUNCTIONS:

• Serves as an administrator to the information security systems to ensure that best practice control objectives are achieved in protecting information assets.
• Monitors security event alerts from various sources including SIEM, IDS/IPS, endpoint and network security tools.
• Stays current with emerging threats, vulnerabilities, and industry best practices.
• Performs real-time analysis of security alerts and escalate incidents appropriately.
• Assists with the maintenance and development of the information security policies and SOPs; ensures policies meet business requirements and align with US federal, state, EU, and additional global obligations.
• Assesses existing IT policies, guidelines, procedures, and standards to discover gaps and create or align firm documentation, as necessary.
• Performs IT risk assessments to identify, assess, and remediate threats internally and with 3rd party vendors.
• Manages the day-to-day operations of the information security training program to all employees.
• Assists with the firm’s ISO 27001 certification and re-certification process.
• Assists with other projects and initiatives at the direction of the department and firm.

QUALIFICATIONS:

• Bachelor’s degree in Cybersecurity, Information technology, or related field required and professional certifications (e.g., CompTIA Security , SSCP) preferred.
• Minimum of six (6) years of work experience in the field of information security and compliance, or equivalent combination of education and work experience required.
• Experience in IT control frameworks e.g. ISO 27001, NIST 800-171, SOC, CIS.
• Highly proficient in MS Outlook, Word, and Excel as well as basic computer and database management skills.
• Exceptional oral and written communication skills and the ability to articulate highly technical information for real world business impact at a senior management level.
• Strong time management, prioritization, problem-solving, and organizational skills and the ability to work effectively in a high-pressure environment.
• Strong interpersonal skills and ability to work effectively with different levels of constituencies
• Flexibility and capacity to respond calmly, efficiently, and effectively in stressful situations.
• Punctual and reliable and able to meet set deadlines and work effectively under pressure.
• Ability to maintain confidentiality of matters and other firm business information.

Wolf Greenfield does not offer visa sponsorship. All job openings are subject to export control regulations.

The expected salary range for this position is $82,000-$105,000 annually. Actual pay will be determined based on experience and other job-related factors permitted by law. Any offer of employment is subject to the successful completion of a background check (and reference check). It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Wolf Greenfield offers a comprehensive benefit package focused on the overall well-being of firm employees. Our benefits include multiple health care plan options, vision and dental insurance, flexible spending accounts/health saving accounts and life insurance. Eligibility for our employer sponsored 401(k) plan includes an employer match and discretionary profit sharing. The firm is invested in our employees development by providing tuition reimbursement and professional development opportunities. Additionally, WGS offers further benefits and perks focused on employee well-being including generous paid time off; including sick time and vacation time, parental leave, commuter benefits, charitable matching gift program, well-being support and much more!

Physical Demands: The firm will strive to provide reasonable accommodations, as requested, to enable an employee with a disability to successfully perform this position in our office setting. Frequent communication is an essential aspect of this position and employees must be able to exchange timely and accurate information in a variety of situations. This position may also encompass maintaining a stationary position for long periods of time (at least up to 50% of the workday) with occasional movement, as well as lifting and/or moving objects that weigh up to 25 pounds. Other essential functions may apply and employees working remotely have the same or similar requirements.

Work Environment: The office work environment of the firm is characteristic of the environment the job holder will encounter. In this typical office setting, an employee will encounter standard office equipment and any noise associated with that equipment. The noise level is usually quiet to moderate. The office setting of Wolf Greenfield requires the ability to manage multiple work priorities along with frequent interruptions.