Systems Security Analyst

Role Summary

Cross-cutting firmwide role integrating client, business and technology requirements to protect data and systems. Access Management and Identity Controls design and standard methodologies. Governance and analysis and reporting of access and identity usage. Operations and management of Identity and Access (IAM) including provisioning. Done in active partnership and with oversight by Business, Enterprise Architecture, Technology Platform and Application Owners as they are accountable for the secure design, configuration, and operation of their environments.

The Systems Security Analyst is a member of the Identity & Access Management Operations team within Enterprise Security. The team is responsible for the operations and management of the organization’s Identity & Access Management platform including full user lifecycle. The team supports the maintenance of roles and entitlements in the platform, proper access approval pathing, and works closely with end users, application teams, access provisioners, and Compliance Risk Management.

• Investigate, understand, troubleshoot, remediate, and clearly document technical issues related to access & security operations, user lifecycle, application integrations, and access provisioning.
• Individual Contributor operating independently on daily tasks and ticketing queues, concurrently.
• Performs Role Engineering analysis to support Role Base Access Controls (RBAC).
• Monitors daily provisioning requests to ensure appropriate access.
• Gathers application requirements for integrating with provisioning system.
• You perform analysis to respond to IS Security risks and compliance audits.
• Supports policies, procedures, and systems to support IAM Governance.
• Develops educational materials to promote standard methodologies for IAM.
• Trains junior analysts to conduct daily tasks associated with provisioning.
• Demonstrates strong logic and reasoning capabilities.
• Uses questions and proposals to clarify requirements when unclear.
• Other duties as assigned.

• Applies understanding of the Financial Services and Asset Management industries.
• Connects one's own work with the strategy of their team and/or department.
• Can competently engage in business-led conversations.

• Typically, 1+ years of meaningful experience.
• Understands modern software methodologies (e.g., Agile, XP, Scrum).
• Working understanding of modern authentication and authorization techniques and technologies.
• Engages in mentorship to improve technical skills.
• Demonstrates competence in SQL programming language.
• Reviews and corrects his/her personal work with minimal assistance.
• Solicits feedback and mentorship to improve technical understanding and skills.
• Identifies system/process/data impacts (up and down stream) and proposes appropriate alternatives/remediation.
• Demonstrates some understanding in multiple technologies/ applications.
• Can explain basic technical concepts to a non-technical audience.
• Identifies impacts across teams and coordinate to manage dependencies and potentially competing priorities.

• Bachelor's degree or the equivalent combination of education and relevant experience.
• 2+ years of total relevant work experience and Security related certification (Security+, CC, SSCP, etc).

FINRA licenses are not required and will not be supported for this role.

This role is eligible for hybrid work, with up to three days per week from home.