Information Security Consultant (Hybrid)

Securian Financial Group; Juneau (AK); Hybrid; USD 110,000 - 170,000; Full time

Benefits offered by this job

Hybrid work arrangement

Health insurance

401(k) retirement plan

Paid time off

Job summary

Securian Financial Group is seeking an Info Security Consultant (or Sr Con) to join our Cybersecurity Risk Team. The role focuses on risk-based assessments for new technologies, ensuring IPF compliance and alignment with industry best practices.

You will collaborate with Governance, Operations, Privacy, Compliance, and Law leaders across the enterprise. You will manage initiatives, provide business analysis and documentation, and serve as a SME to guide remediation actions.

Qualifications

• Bachelor's degree or equivalent combination of education and experience.
• 3–5 years of Information Security experience.
• Experience in Governance and/or Compliance process development and in providing business analysis/documentation services.

Responsibilities

• Conduct cybersecurity risk assessments for new technologies to identify security gaps.
• Research and understand use cases and their organizational impact.
• Meet with Technical and Business owners to conduct Information Risk Consultation Assessments (IRCA).
• Serve as subject matter expert to identify and solve complex problems.
• Bring knowledge of information security best practices to the team.
• Collaboratively lead and drive cybersecurity governance and risk initiatives.

Skills

Information Security

Governance

Compliance

Project Management

Business Analysis

Education

Bachelor's degree

Tools

NIST CSF

ISO

NYDFS

FAIR

Job description

Full job description. At Securian Financial the internal title for this position is Info Security Consultant or Info Security Sr Con. The title and salary will be determined based on experience and applied skills.

Position Overview

The Cybersecurity Risk Consultant operates within the Cybersecurity Risk Team in close partnership with Cybersecurity Governance, Cybersecurity Operations, Enterprise Cybersecurity Solutions, Privacy, Compliance, Law, and leaders from across the Enterprise. The Cybersecurity Risk team is responsible for conducting cybersecurity risk-based assessments on new technologies brought into the Company. The Team assesses technologies, identifies potential risks, and partners with technical and business owners to assist and identify potential remediation actions. The Team's primary objective is to ensure the confidentiality, integrity, and availability of Securian's sensitive information by ensuring these technologies adhere to the Company's Information Protection Framework (IPF) and industry best practices. The Cybersecurity Risk Consultant will support various strategic initiatives, enabling Securian - Governance, Risk, and Compliance teams to adhere to policies and industry best practices as a part of overall process, risk, and control governance. We are seeking an independent, self-motivated candidate with a proven track record of successful project management, experience in Information Security, Governance and/or Compliance process development, and in providing business analysis/process documentation services, with the ability to collaborate across Securian's Enterprise to achieve mutual goals.

What You Would Do In This Job

• Conduct comprehensive cybersecurity risk assessments for technologies coming into the organization to identify security risks, gaps, or weakness in controls.
• Research and understand the use case and how it will be utilized within the organization in preparation.
• Meet with Technical and Business owners to ensure understanding of use case and conduct Information Risk Consultation Assessments (IRCA).
• Serve as subject matter expert to identify and assist in solving complex problems.
• Bring in-depth conceptual and practical knowledge of information security best practices.
• Act as a resource for colleagues with less experience.
• Support various other Cybersecurity Governance and Risk initiatives.
• Collaboratively lead, develop, enhance, and drive execution of various initiatives within the Cybersecurity Governance and Risk team.

What We'd Expect From You

• Self-Driven, ability to independently manage priorities and tasks with minimal direction.
• Organizational skills, ability to prioritize and coordinate multiple projects/initiatives.
• Strong attention to detail and accuracy of information.
• Possess and demonstrate excellent oral and written communication.
• Working knowledge of all areas of Securian along with its subsidiaries.
• Understanding of Information Security principles, standards, tools, and methodologies.
• Minimum of 3-5 years of Information Security experience.
• Bachelor's degree or equivalent combination of education and experience.

Preferred Skills

• Understanding of Information Security Frameworks and Standards (NIST CSF, ISO, NYDFS, FAIR, etc).
• Proficiency with consulting skills (client service, analysis of information, negotiation, and project management).
• Able to read and comprehend Architecture and Data Flow Diagrams.
• Strong analytical and critical thinking.
• In-depth knowledge of various security technologies.

Hybrid Work Arrangement

Securian Financial believes in hybrid work as an integral part of our culture. Associates get the benefit of working both virtually and in our offices. If you are in a commutable distance (90 minutes) you'll join us 2-3 days each week in our offices to collaborate and build relationships. Our policy allows flexibility for the reality of business and personal schedules. When working in our offices at least two days per week isn’t feasible (vacations, illness, travel, etc.), an eight day per month standard is an option.

This position will be in a hybrid working arrangement.

Physical Job Requirements

• Ability to utilize keyboard, mouse and computer for up to 8 hours per day.
• Ability to work at least 40 hours per week.
• Ability to utilize phone and/or virtual meeting platform for 2-4 hours per day.
• Ability to perform grasping tasks 2-4 hours per day.

The physical job requirements described above are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions of jobs.

Benefits

Paid Time Off

• During your first year of hire, you receive a prorated bank of personal days and vacation time depending on your month of hire.

Leave Programs

• Securian's flexible leave programs allow time off from work for parental leave, caregiver leave for family members, bereavement and military leave.

401(k) Retirement Plan

• Company-funded pension plan and a 401(k) retirement plan: Share in the success of our company. Securian's 401(k) company contribution is tied to our performance up to 10 percent of eligible earnings, with a target of 5 percent. The amount is based on company results compared to goals related to earnings, sales and service.

Health Insurance

• From the first day of employment, associates and their eligible family members – including spouses, domestic partners and children – are eligible for medical, dental and vision coverage.

Volunteer Time

• Through company-sponsored events, volunteer paid time off, a dollar-for-dollar matching gift program and more, we encourage you to support organizations important to you.

Associate Resource Groups

• Mental Wellness and Disability
• Pride at Securian Financial
• Securian Young Professionals Network
• Securian Multicultural Network
• Securian Women and Allies Network
• Servicemember Associate Resource Group