Senior Cyber Threat Intel Analyst

About FINRA

FINRA (Financial Industry Regulatory Authority) is the largest independent regulator of securities firms doing business in the United States. Our mission is to protect investors and ensure market integrity through effective and efficient regulation. We oversee approximately 3,400 brokerage firms, 152,000 branch offices, and nearly 624,000 registered securities representatives. At FINRA, you'll join a team of dedicated professionals committed to safeguarding the financial system and empowering investors.

Are you a cyber threat intelligence expert ready to make a meaningful impact on the financial industry's resilience? As a Senior Principal Risk Specialist on FINRA's Cyber & Operational Resilience (CORE) team, you'll be at the nexus of cybersecurity intelligence and regulatory oversight—transforming threat data into actionable insights that protect member firms and, ultimately, millions of investors.

In this role, you'll serve as a critical bridge between the rapidly evolving cyber threat landscape and the securities industry. You'll monitor emerging threats, analyze intelligence from diverse sources, and translate complex risk scenarios into clear guidance that helps firms strengthen their defenses. This isn't a desk-bound analyst position—you'll lead high‑complexity examinations, consult directly with member firms, and share your expertise through training, conferences, and industry events.

If you're energized by the challenge of staying ahead of sophisticated threat actors while building collaborative relationships across the industry, this role offers the perfect blend of technical depth, strategic influence, and mission‑driven impact.

• Drive Cyber Intelligence & Risk Analysis: Monitor and analyze cyber threat intelligence from multiple sources—including threat feeds, vendor reports, dark web intelligence, and incident data. Produce timely cyber event risk assessments and disseminate actionable insights to member firms to enhance their defensive posture.

• Assess Vendor & Concentration Risks: Monitor vendor risk reports to identify concentration risks and vulnerabilities in key business functions across the industry. Integrate CORE findings into FINRA's internal risk assessment frameworks.

• Serve as a Trusted Consultant: Respond to complex inquiries from Regulatory Operations teams, providing expert guidance on cyber risks with minimal supervision.

• Educate & Influence the Industry: Share your expertise through conference panels, training seminars, boot camps, and district compliance events. Develop staff training materials, podcasts, and specialized content that elevates cybersecurity awareness across FINRA and the industry.

• Embody FINRA's Values: Collaborate both in‑person and virtually to advance investor protection and market integrity in everything you do.

• Bachelor's degree or equivalent combination of education and experience
• Intermediate securities, compliance, or financial regulatory experience
• Advanced experience in cybersecurity risks, threat intelligence, or operational resilience

• Intermediate knowledge of FINRA's eleven risk fundamentals
• Intermediate knowledge of securities rules and regulations
• Advanced‑to‑expert knowledge of cyber risks, threat landscapes, and intelligence analysis specific to your specialization

• Advanced‑to‑expert written and oral communication skills—you can translate complex threats into clear, actionable guidance
• Advanced‑to‑expert negotiation skills and ability to build collaborative relationships with diverse stakeholders
• Advanced‑to‑expert organizational, planning, and prioritization skills
• Advanced‑to‑expert resiliency—you adapt and thrive under pressure and uncertainty

• Major in Accounting, Finance, Economics, Business Administration, Cybersecurity, Computer Forensics, Data Analytics, or related fields
• Advanced degree or professional certification (CISSP, CISM, CRISC, GIAC certifications)
• Series 99 license
• Strong technical background with demonstrated expertise in cyber threat intelligence platforms (MISP, Threat Connect, Recorded…