Cyber Security Analyst

Job Category: Group 2:
Professional & Technical

Requisition Number: CYBER
002077

• Posted :
  October 7, 2026
• Full-Time
• On-site

Showing 1 location

With more than 140 Member Firms located primarily across the United States, M Financial is one of the nation's leading financial services design and distribution companies. Since 1978, our network of independent insurance, investment, and executive benefit firms has served the needs of ultra-affluent individuals, corporate executives, successful entrepreneurs, and Fortune 1000 companies. Our Member Firms are independent but work together toward a common goal: to offer a broad range of sustainable solutions designed to help their clients meet their financial goals.

Role Summary :

The Cyber Security Analyst (CSA) is responsible for monitoring, tracking, and supporting the remediation of cybersecurity and compliance issues across both M Financial and Member Firms. The CSA assists in ensuring that systems, processes, and controls remain aligned with applicable security standards, regulatory requirements, and organizational policies.

This role supports the identification, assessment, and documentation of regulatory compliance obligations, information security risks, control deficiencies, and cybersecurity best practices. The CSAalso helps evaluate compliance with the Member Firm Information Security Policy (MFISP) and contributes to ongoing efforts to strengthen the organization's overall security and compliance posture.

Responsibilities:

Compliance & Audit

• Lead response to audits from regulators, independent auditors, and third-party risk assessments (partners, carriers, brokers, cyber-insurance providers)
• Ensure security controls demonstrate fulfillment of regulatory and contractual obligations
• Analyze management and technical controls to verify secure configurations, documented processes, and standards

Member Firm Support

• Monitor Member Firm security posture; document gaps, track progress, and follow up to ensure MFISP and regulatory compliance
• Partner with Member Firms' Managed Service Providers (MSPs) to strengthen their security posture
• Coordinate and facilitate Member Firm security incident reporting

Program & Policy Development

• Contribute to and update information security policy, standards, and controls
• Support development of security processes, procedures, and SLAs
• Help create standard operating procedures and protocols
• Work with Core Technology and Cybersecurity teams to track remediation and vulnerability mitigation
• Support security and privacy awareness training for internal and Member Firm employees
• Provide security advice across the organization (controls, assessments, remediation)
• Track metrics and recommend process improvements for compliance deadlines and progress

Ongoing

• Act as the primary intake and triage resource for cybersecurity-related tickets in the Salesforce queue, ensuring timely assessment, prioritization, escalation, and coordination of incident and service requests in accordance with established procedures and service level expectations.
• Stay current on security products, trends, and emerging threats
• Research new security technologies to safeguard company and Member Firm data
• Other duties as assigned

Core Competencies:

• Strong written/verbal communication (reports, documentation, stakeholder and regulator correspondence)
• Ability to explain technical topics to non-technical audiences
• Policy comprehension and ability to train others on it
• Security fundamentals: vulnerability management, risk assessment, auditing, incident response, compliance
• Network applications/protocols, logging, monitoring
• Problem-solving, technical troubleshooting
• Self-starter with initiative, learning agility, growth mindset
• Teamwork and organizational awareness

Qual…