Cyber Security Analyst

With more than 140 Member Firms located primarily across the United States, M Financial is one of the nation's leading financial services design and distribution companies. Since 1978, our network of independent insurance, investment, and executive benefit firms has served the needs of ultra-affluent individuals, corporate executives, successful entrepreneurs, and Fortune 1000 companies. Our Member Firms are independent but work together toward a common goal: to offer a broad range of sustainable solutions designed to help their clients meet their financial goals.

The Cyber Security Analyst (CSA) is responsible for monitoring, tracking, and supporting the remediation of cybersecurity and compliance issues across both M Financial and Member Firms. The CSA assists in ensuring that systems, processes, and controls remain aligned with applicable security standards, regulatory requirements, and organizational policies.

This role supports the identification, assessment, and documentation of regulatory compliance obligations, information security risks, control deficiencies, and cybersecurity best practices. The CSA also helps evaluate compliance with the Member Firm Information Security Policy (MFISP) and contributes to ongoing efforts to strengthen the organization's overall security and compliance posture.

• Lead response to audits from regulators, independent auditors, and third-party risk assessments (partners, carriers, brokers, cyber-insurance providers)
• Ensure security controls demonstrate fulfillment of regulatory and contractual obligations
• Analyze management and technical controls to verify secure configurations, documented processes, and standards

• Monitor Member Firm security posture; document gaps, track progress, and follow up to ensure MFISP and regulatory compliance
• Partner with Member Firms' Managed Service Providers (MSPs) to strengthen their security posture
• Coordinate and facilitate Member Firm security incident reporting

• Contribute to and update information security policy, standards, and controls
• Support development of security processes, procedures, and SLAs
• Help create standard operating procedures and protocols

• Work with Core Technology and Cybersecurity teams to track remediation and vulnerability mitigation
• Support security and privacy awareness training for internal and Member Firm employees
• Provide security advice across the organization (controls, assessments, remediation)
• Track metrics and recommend process improvements for compliance deadlines and progress

• Act as the primary intake and triage resource for cybersecurity-related tickets in the Salesforce queue, ensuring timely assessment, prioritization, escalation, and coordination of incident and service requests in accordance with established procedures and service level expectations.
• Stay current on security products, trends, and emerging threats
• Research new security technologies to safeguard company and Member Firm data
• Other duties as assigned

• Strong written/verbal communication (reports, documentation, stakeholder and regulator correspondence)
• Ability to explain technical topics to non-technical audiences
• Policy comprehension and ability to train others on it
• Security fundamentals: vulnerability management, risk assessment, auditing, incident response, compliance
• Network applications/protocols, logging, monitoring
• Problem-solving, technical troubleshooting
• Self-starter with initiative, learning agility, growth mindset
• Teamwork and organizational awareness

• Bachelor's degree required (a Cybersecurity degree can offset one year of experience)
• 1–3 years in information security and security compliance
• Working knowledge of NIST CSF, SEC, SOC 2, and FINRA standards
• Security certification and/or professional IT experience are strongly preferred (e.g., Security+, Network+)
• Strong analytical/critical-thinking skills and high attention to detail
• Ability to build relationships with internal and external stakeholders quickly
• Comfortable presenting to groups of varying size and technical fluency

• This position is based on-site at our offices in Uptown at the Quad in Dallas, TX with the flexibility to work one day per week remotely
• Normal office environment/desk assignment
• Regularly operates a computer and other standard office equipment to perform essential job functions, such as…