InfoSec Risk Analyst — Hybrid Role + Benefits

Fisher Investments; Tampa (FL); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

100% paid medical, dental and vision

401(k) match 50%

20 days PTO + 10 holidays

Family support programs

Hybrid work-from-home option

Job summary

Fisher Investments is seeking an Information Security Risk Analyst to partner with Information Security, Technology and Enterprise Risk Management teams. You will perform technology risk analysis, develop risk practices for Digital Assets and implement controls in support of Fisher’s Digital Asset risk management goals.

You will evaluate inherent risk, research vendor controls, and collaborate with SMEs to ensure effective Digital Asset risk management.

Qualifications

• 3+ years of experience in Enterprise Risk Management for Digital Assets.
• 1+ years of experience in Digital Asset audit review experience (SOC 2 Type II, SOX, PCI).
• Knowledge of Information Security and risk standards/frameworks (NIST 800-53, CIS, OWASP, ISO-27001, ITIL, COSO).
• Experience assessing risk or implementing controls in a cloud-based enterprise environment.
• Extensive knowledge of information systems, risk assessment methodologies and security control technologies such as Okta, EntraID, Splunk, and Netskope.
• Balance risks in ambiguous and complex scenarios.
• Team-oriented, highly collaborative, experienced leading initiatives.
• Experience in GRC platforms.
• Delivery of quality work within an Agile Scrum team.
• Preference for experience in regulated industries: Finance, Healthcare.

Responsibilities

• Represent Information Security in Enterprise Risk Management technology reviews for Digital Assets, including evaluation of inherent risk, researching vendor practices and controls, recommending new practices and controls, and estimating residual risk
• Collaborate with Information Security, Technology, and Data Privacy SMEs to determine efficacy of Digital Asset controls
• Research new possible Digital Asset risk controls
• Perform security-focused risk and gap assessments to identify, document and track security risks associated with Cloud and physical IT infrastructure and services, Applications, Information systems, and Vendors/other third parties
• Identify risk levels and associated controls to manage risk levels applying both quantitative and qualitative techniques
• Assist in maturing Enterprise Risk Management evaluation procedures for Digital Assets
• Translate risk management information from technical to business language
• Provide security risk services to business owners and partners
• Work with project teams to collect and document evidence of cyber control implementation
• Understand and maintain knowledge of methodologies and technologies in risk assessments and controls measures

Skills

ERM for Digital Assets

Risk evaluation processes

Vendor research

SOC 2 Type II / SOX / PCI audits

Security frameworks (NIST 800-53, CIS,

ISO-27001, ITIL, COSO

Cloud risk assessment

Okta / EntraID / Splunk / Netskope

Education

Bachelor's degree in Computer Science / Information Security or equivalent

Tools

Okta

EntraID

Splunk

Netskope

Job description

Fisher Investments is seeking an Information Security Risk Analyst to partner with Information Security, Technology and Enterprise Risk Management teams. You will perform technology risk analysis, develop risk practices for Digital Assets and implement controls in support of Fisher’s Digital Asset risk management goals.

You will evaluate inherent risk, research vendor controls, and collaborate with SMEs to ensure effective Digital Asset risk management.