Cybersecurity Advisor

CYBERSECURITY ADVISOR (Hybrid position in NYC & Boston)

The Advisory Group is a core group within Drawbridge. As an agile team, Advisory works to provide best-in‑class service and support to our clients. As a Cybersecurity Advisor, you will assist with maintaining relationships with clients, their IT resources, and associated third parties. You will work to gain an understanding of the Drawbridge business process, engagement deliverables and services, cybersecurity risk management, IT controls, and regulatory standards.

In this highly team collaborative role, you will gain valuable hands‑on experience, working with many of the world’s most successful asset management firms.

The Cybersecurity Advisor will report to a Advisory Manager.

• Innovation:
  As the market leader, Drawbridge draws on its in‑depth, collective expertise in its constant effort to innovate both our platform and our approach to service
• Integrity:
  Our clients and partners lean on us because they know we are trustworthy and honor what we say
• Collaboration:
  
  We are here to win, and we only win when we work together across team
• Diversity:
  We are inclusive. We honor, respect, and appreciate each other’s differences and perspectives

• Be primary point of contact for Drawbridge clients
• Lead kick off call and create success plans for new clients
• Execute on success plans & work closely with the Account/Relationship Management team to ensure positive client health. Manage post deliverable CSAT
• Execute on Tech‑enabled Platform Strategy (100% CRA review calls are performed within the platform) including:
  Engage with clients through the platform and showcase new tools on the platform.
• You will partner with other CS professionals to help define best practices for client service and provide feedback from clients on platform to the product team
• Assist with client projects and develop the skills to lead projects
• Assist with tailoring the project management framework, approaches, and methods to help streamline projects.
• Identify tasks necessary to remediate identified risks and vulnerabilities for clients and service providers.
• Conduct risk analysis, assessments, and security audits using internal and third‑party tools.
• Demonstrate an advanced understanding of business processes, internal control risk management, IT controls, and related standards.
• Identify and evaluate complex business and technology risks, controls to mitigate risks, and related opportunities for control improvement.
• Understand business, information technology, risk, and operational management processes.
• Interpret controls and provide suggestions for mitigation strategies to clients and service providers.
• Learn the regulatory framework and compliance guidelines for cybersecurity for the SEC, NFA, FCA, MAS, and any other regulatory agency applicable to our clients.
• Ensure projects are completed within a reasonable time frame and monitor the status of projects.
• Initiate periodic check‑ins with clients to ensure services and projects are up to par with client expectations.
• Follow up with clients and service providers to ensure document requests or documents needing review are addressed.
• Update internal trackers, provide status updates to project managers, and ensure other internal matters relating to projects or clients are kept up‑to‑date.
• Maintain relationships with clients, IT providers, and other service providers.

• Prepare summary and gap analysis reports highlighting the features of our clients’ cybersecurity programs.
• Schedule, conduct, and lead risk assessment meetings with clients and IT providers to obtain information regarding a client’s security and privacy controls.
• Prepare risk assessment reports and discuss the assessment findings with clients.
• Conduct cybersecurity due diligence on our clients’ service providers.
• Send, track, and store due diligence questionnaires and corresponding documents from service providers.
• Create deadlines, send reminder emails, and deadline extension notifications to service providers.
• Review due diligence submissions from service providers and follow up with service providers, where necessary.
• Prep…