Principal Analyst, IT Security

Raymond James Financial, Inc.; Saint Petersburg (FL); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Raymond James Financial, Inc. in Saint Petersburg, FL, seeks a security/compliance leader for a hybrid role. You will detect and remediate incidents, design reporting strategies, and help ensure regulatory and policy compliance.

The role requires coordinating across Operations, Engineering, Security, Risk and Audit, establishing SOPs, KPIs, and disaster recovery plans to protect company data. Visa sponsorship is not available.

Qualifications

• Strong experience with IT compliance, audit, risk management, and operational controls, including audit representation, evidence collection, findings management, and remediation.
• Proven ability to drive vulnerability management and remediation, including prioritization, tracking, validation, and resolution within established SLAs.
• Experience developing and maintaining SOPs, technical standards, and controls, with measurable improvements in compliance and audit readiness.
• Ability to establish and track compliance KPIs, including vulnerability remediation SLAs, aging findings, audit action closure, control effectiveness, and overdue remediation.
• Strong understanding of enterprise networking and network security, including routing, switching, firewalls, VPN, SD-WAN, and infrastructure security controls.
• Ability to demonstrate measurable outcomes such as reduced vulnerability backlog, fewer overdue findings, improved remediation timelines, and increased control compliance.
• Strong communication and leadership skills, with the ability to translate compliance requirements into technical actions and drive execution across Operations, Engineering, Security, Risk, and Audit.
• Team-oriented, security-first mindset with the ability to drive consistent compliance practices across global teams.

Responsibilities

• Lead in detecting and analyzing security incidents, including attacks, breaches, and identified vulnerabilities, and remediate any security gaps in line with the security incident management procedure.
• Contribute to the design and creation of reporting strategies and templates. Lead execution of complex reports, identifying and interpreting complex patterns and trends, and translating those insights into actionable recommendations.
• Design and implement disaster recovery and contingency plans to protect company data.
• Monitor and review performance and behaviors within area of responsibility to identify and resolve noncompliance with the organization's policies and relevant regulatory codes and codes of conduct.

Skills

IT compliance

Audits & risk

Vulnerability management

SOPs

KPIs

Network security

Leadership

Cross-functional collaboration

Job description

This role is a hybrid workstyle: with the associate expected to work from a Raymond James office location at least three days per week, including either Monday or Friday.

Raymond James’ work environment is designed to reinforce our values-based culture while supporting the competitiveness, profitability, and long-term growth of our firm.

Please note: This role is not eligible for Work Visa sponsorship, either currently or in the future.

Responsibilities:

• Lead in detecting and analyzing security incidents, including attacks, breaches, and identified vulnerabilities, and remediate any security gaps in line with the security incident management procedure.

• Contribute to the design and creation of reporting strategies and templates. Lead execution of complex reports, identifying and interpreting complex patterns and trends, and translating those insights into actionable recommendations.

• Design and implement disaster recovery and contingency plans to protect company data.

• Monitor and review performance and behaviors within area of responsibility to identify and resolve noncompliance with the organization's policies and relevant regulatory codes and codes of conduct.

Technical Skills/Experience:

• Strong experience with IT compliance, audit, risk management, and operational controls, including audit representation, evidence collection, findings management, and remediation.

• Proven ability to drive vulnerability management and remediation, including prioritization, tracking, validation, and resolution within established SLAs.

• Experience developing and maintaining SOPs, technical standards, and controls, with measurable improvements in compliance and audit readiness.

• Ability to establish and track compliance KPIs, including vulnerability remediation SLAs, aging findings, audit action closure, control effectiveness, and overdue remediation.

• Strong understanding of enterprise networking and network security, including routing, switching, firewalls, VPN, SD-WAN, and infrastructure security controls.

• Ability to demonstrate measurable outcomes such as reduced vulnerability backlog, fewer overdue findings, improved remediation timelines, and increased control compliance.

• Strong communication and leadership skills, with the ability to translate compliance requirements into technical actions and drive execution across Operations, Engineering, Security, Risk, and Audit.

• Team-oriented, security-first mindset with the ability to drive consistent compliance practices across global teams .