Fractional Cyber Security Analyst (Advisor Network)

Arootah; United States; On-site; USD 172,000 - 344,000; Full time

Job summary

Arootah is seeking experienced Cybersecurity Analysts to consult for a prestigious client base in hedge funds and family offices. You will implement, maintain, and operate a cybersecurity program, leveraging hands-on experience in leading firms.

Join a network of senior operators delivering expert security advice and action-oriented results. As a consultant within Arootah’s advisor network, you’ll work on project-based engagements, supported by a network that includes 700+ vetted advisors and

Qualifications

• Bachelor's degree in a related field.
• Certifications: CEH, CISM, CompTIA Security+, CISSP, GSEC, GCIH, GNFA, GREM.
• 5+ years of Cybersecurity Analyst experience at hedge funds or family offices.
• Experience with Splunk Cloud, Rapid7 Nexpose, Sophos, VaronisDatAlert, ForeScoutCounterACT.
• Strong knowledge of Azure AD, SQL, Office365, Windows Server/
• Experience implementing security/compliance frameworks (NIST, Cobit, ISO).
• Strong writing/presentation skills to communicate findings.

Responsibilities

• Best practice reviews.
• Developing realistic action plans.
• Breaking goals into actionable steps.
• Advising on vendor selection and oversight.
• Creating and implementing policies, procedures, and controls.
• Lead vulnerability management and annual cybersecurity assessments.
• Test and analyze business continuity and disaster recovery plans.
• Respond to real-time alerts and generate security reports.

Education

Bachelor's degree in Computer Science, Computer Engineering, Information Systems, Information Sciences, or related field

5+ years of experience as a Cybersecurity Analyst at hedge funds or family offices

Strong writing and presentation skills

Tools

Splunk Cloud

Rapid7 Nexpose

Sophos Antivirus

VaronisDatAlert

ForeScoutCounterACT

Job description

Opportunity Overview

Arootah engages a curated network of senior operators to support clients across the alternative investment industry, including hedge funds, private equity firms, and family offices. Advisors are deployed on project-based engagements when client needsmatchtheirexpertise. Joining the network does not guarantee placement; it provides access to opportunities as they arise.

Why Join the Arootah Network

• Alt-industry-only engagements with hedge funds, private equity firms, and family offices
• Project-based work that fits around existing commitments
• Client origination and engagement management handled by Arootah; advisors focus on delivery

About Arootah

Arootah is a talent solutions firm purpose-built for the alternative investment industry. We advise and we execute, covering the full talent spectrum from entry to exit across five services: Talent Acquisition, Fractional Leadership, Talent Development, Retention & Compensation, and Transition.

Mosttalentfirms solve one problem. Because we cover the full spectrum, we can help clientsidentifyand solve the right one. We start with diagnosis, then deliver.

Our team has run alternative investment firms at the highestlevelsas COOs, CFOs, and CCOs. That operator experience, combined with 15+ years ofalternatives-specific recruiting and a network of 700+ vetted advisors across 18 functional disciplines, is what makes the advice credible and the execution reliable. We also draw on a network of 600+ coaches, deploying those with specific experience guiding senior executives in thealternativesindustry.

One industry. Onetalentpartner. Entry to exit.

Learn more: https://arootah.com/

Who We’re Looking For

Arootah is searching for experienced Cybersecurity Analysts toconsult toour highly prestigious client base. As a consultant, you will work with our Hedge Fund and Family Office clients toprovideexpert advice. Having previously served in this role, you have specific, hands‑on experience implementing,maintaining, andoperatinga cybersecurity program for a leading Hedge Fund or Family Office.

Core Areas of Expertise

• Best practice reviews.
• Developing realistic and effective action plans.
• Breaking apart goals into actionable steps.
• Advising onvendor selection and oversight.
• Creating and implementing policies, procedures, and control measures.
• Evaluating each client’s advancement toward goal actualization through key performance indicators (KPIs) and scoring matrices.
• Special projects or other areas of need.
• Implement andassistwith the day‑to‑day operations of securing the firm’s various information systems by providing technicalexpertisein all areas of network, system, and application security.
• Protect sensitive information by installing and configuring security software like firewalls and encryption programs.
• Monitor network traffic and analyze records like authentication logs toidentifyand investigate anomalies to prevent and detect security incidents.
• Lead the firm's vulnerability management program, conduct the annual cybersecurity assessments and penetration tests, and research and report on emerging threats, to help the firm take pre‑emptive risk mitigation steps.
• Implement organization‑wide security best practices to protect the business against existing, new, and emerging security threats.
• Test and analyze the organization’s business continuity and disaster recovery plan to ensure operations will continuein the event ofa cyberattack or natural disaster.
• Assesses new security technologies todeterminepotential value for the firm.
• Execute and carry outfirmincident response program toidentifyand prevent all potential breaches (internal or external), or misuse of data, that may occur.
• Review, investigate, and respond to real‑time alerts within the environment.
• Generate real‑time and historical reports for internal and external stakeholdersregardingsecurity and/or compliance violations.

What You Bring

• ABachelor’s degree in Computer Science, Computer Engineering, Information Systems, Information Sciences, or a related field, with a strong academic record.
• One or more of the following certifications: CEH, CISM, CompTIA Security+, CISSP, GSEC, GCIH, GNFA, GREM or other related SANS certifications.
• 5+ years of specific experience as a Cybersecurity Analyst at a hedge fund or family office.
• Working experience with one or more of the following technology vendors and products: Splunk Cloud, Rapid7 Nexpose Vulnerability Scanner, Sophos Antivirus, VaronisDatAlert, ForeScoutCounterACT, or similar.
• Thorough understanding of Microsoft’s enterprise technology platform, including Azure, Active Directory, SQL, Office365, andthe Windowsserver and desktop operating systems.
• In‑depth knowledge of security event management, network security monitoring, investigating common types of attacks, network packet analysis, log collection and analysis, and reviewing security events.
• Demonstrated experience implementing and/or enforcing security and compliance frameworks such as NIST, Cobit, and ISO.
• Strong writing and presentation skills arerequiredinorder to communicate findings and recommendations, as well as the ability to articulate security‑related concepts to a broad range of technical and non-technical staff.

$125 - $250 an hour

Important Note

This opportunity is to join Arootah’s advisor network and is not tied to a specific active engagement. Advisors …