Cybersecurity Analyst

Franklin Fitch; New York (NY); Hybrid; USD 90,000 - 100,000; Full time

Job summary

Franklin Fitch is seeking a Cybersecurity Analyst to join a global investment management client. The role focuses on leading security awareness initiatives, phishing simulations, and operational security support within a hybrid, globally distributed security team. The candidate will engage with HR, Risk, Legal and IT to bolster a security-first culture.

The role emphasizes hands-on security operations, due diligence responses, and clear security communications across the organization.

Qualifications

• Background as a Security Analyst with security awareness and operations support.
• Hands-on experience running phishing simulations and awareness programs.
• Comfort handling employee-facing security questions and cross-functional communication with HR and other teams.
• Experience with due diligence questionnaires/client security responses.
• Strong communication and stakeholder management skills.
• Dashboard/metrics reporting experience is a nice-to-have.

Responsibilities

• Design, run and report on phishing simulation campaigns and security awareness programs.
• Act as a key point of contact for employee security questions and support a shared security mailbox.
• Partner with HR and internal teams to strengthen security culture and communications.
• Support customer due diligence questionnaires and client security enquiries.
• Contribute to DLP monitoring/alerts and leaver/offboarding access configuration, plus metrics and dashboard reporting.

Skills

Phishing campaigns

Security awareness

Stakeholder management

Cross‑functional communication

Security operations support

Dashboards & metrics reporting

Tools

KnowBe4

NinjaOne

Job description

Cybersecurity Analyst

$90,000 – $100,000

My client is a global investment management firm serving institutional and individual clients across major financial markets. Operating on a scale across multiple regions, they’re known for a long-term, disciplined approach to our business and for investing seriously in the strength of our security function. Our Information Security team is collaborative and globally distributed, working closely with HR, Risk, Legal and IT to build a resilient, security-first culture across the organization.

They’re now looking for a Cybersecurity Analyst to lead security awareness initiatives and support broader operational security and governance efforts. This position is a great fit for someone who enjoys blending people-focused security work with hands‑on operational support.

What you’ll do

• Design, run and report on phishing simulation campaigns and security awareness programs
• Act as a key point of contact for employee security questions, including supporting a shared security mailbox
• Partner with HR and internal teams to strengthen security culture and communications
• Support customer due diligence questionnaires and client security enquiries
• Contribute to DLP monitoring/alerts and leaver/offboarding access configuration, plus metrics and dashboard reporting

What you need

• Background as a Security Analyst with experience in security awareness and operations support (not strictly a GRC role, though it overlaps with governance/operational elements)
• Hands‑on experience running phishing simulations and awareness programs
• Comfort handling employee‑facing security questions and cross‑functional communication with HR and other teams
• Experience with due diligence questionnaires/client security responses
• Strong communication and stakeholder management skills
• Experience with KnowBe4 or similar awareness platforms; exposure to endpoint/RMM tooling (e.g. NinjaOne) a plus
• Dashboard/metrics reporting experience a nice‑to‑have

Environment

• Large global organization (2,000+ employees), with a globally distributed security team
• Hybrid working model, onsite presence expected most of the week

What you get

• Strong growth trajectory and development pathway within a mature security function
• Collaborative, global team culture with regular social/team events
• Solid technical/training budget to support continued learning