Information Security Consultant; Hybrid

Full job description. At Securian Financial the internal title for this position is Info Security Consultant or Info Security Sr Con. The title and salary will be determined based on experience and applied skills.

The Cybersecurity Risk Consultant operates within the Cybersecurity Risk Team in close partnership with Cybersecurity Governance, Cybersecurity Operations, Enterprise Cybersecurity Solutions, Privacy, Compliance, Law, and leaders from across the Enterprise. The Cybersecurity Risk team is responsible for conducting cybersecurity risk-based assessments on new technologies brought into the Company. The Team assesses technologies, identifies potential risks, and partners with technical and business owners to assist and identify potential remediation actions.

The Team's primary objective is to ensure the confidentiality, integrity, and availability of Securian's sensitive information by ensuring these technologies adhere to the Company's Information Protection Framework (IPF) and industry best practices. The Cybersecurity Risk Consultant will support various strategic initiatives, enabling Securian - Governance, Risk, and Compliance teams to adhere to policies and industry best practices as a part of overall process, risk, and control governance.

We are seeking an independent, self-motivated candidate with a proven track record of successful project management, experience in Information Security, Governance and/or Compliance process development, and in providing business analysis/process documentation services, with the ability to collaborate across Securian's Enterprise to achieve mutual goals.

• Conduct comprehensive cybersecurity risk assessments for technologies coming into the organization to identify security risks, gaps, or weakness in controls.
• Research and understand the use case and how it will be utilized within the organization in preparation.
• Meet with Technical and Business owners to ensure understanding of use case and conduct Information Risk Consultation Assessments (IRCA).
• Serve as subject matter expert to identify and assist in solving complex problems.
• Bring in-depth conceptual and practical knowledge of information security best practices.
• Act as a resource for colleagues with less experience.
• Support various other Cybersecurity Governance and Risk initiatives.
• Collaboratively lead, develop, enhance, and drive execution of various initiatives within the Cybersecurity Governance and Risk team.

• Self-Driven, ability to independently manage priorities and tasks with minimal direction.
• Organizational skills, ability to prioritize and coordinate multiple projects/initiatives.
• Strong attention to detail and accuracy of information.
• Possess and demonstrate excellent oral and written communication.
• Working knowledge of all areas of Securian along with its subsidiaries.
• Understanding of Information Security principles, standards, tools, and methodologies.
• Minimum of 3-5 years of Information Security experience.
• Bachelor's degree or equivalent combination of education and experience.

• Understanding of Information Security Frameworks and Standards (NIST CSF, ISO, NYDFS, FAIR, etc).
• Proficiency with consulting skills (client service, analysis of information, negotiation, and project management).
• Able to read and comprehend Architecture and Data Flow Diagrams.
• Strong analytical and critical thinking.
• In-depth knowledge of various security technologies.

Securian Financial believes in hybrid work as an integral part of our culture. Associates get the benefit of working both virtually and in our offices. If you are in a commutable distance (90 minutes) you'll join us 2-3 days each week in our offices to collaborate and build relationships. Our policy allows flexibility for the reality of business and personal schedules.

When working in our offices at least two days per week isn’t feasible (vacations, illness, travel, etc.), an eight day per month standard is an option.

This position will be in a hybrid working arrangement.

• Ability to utilize keyboard, mouse and computer…