Sr. Security Analyst- Financial Systems, GFIT-REMOTE

The Senior Security Analyst, Financial Systems is a senior member of the GFiT Governance & Security team and is responsible for leading and executing advanced security monitoring, risk assessment, and control activities across the GFiT environment. This role plays a key part in identifying, analyzing, and mitigating complex security risks impacting financial systems and data, while ensuring alignment with corporate security standards, ITGC/SOX requirements, and regulatory expectations.

In addition to hands‑on security operations, the Senior Security Analyst provides subject‑matter expertise during system implementations, enhancements, and incident response activities; partners closely with application, infrastructure, and governance teams; and supports internal and external audits. This role is expected to operate with a high degree of independence and contribute to continuous improvement of security processes and controls within the GFiT environment.

• Security Monitoring & Incident Management

  • Lead advanced monitoring and analysis of security alerts and logs from security tools, identifying trends, anomalies, and potential threats impacting GFiT financial systems.

  • Perform in-depth investigation of complex security events and incidents, including root‑cause analysis, impact assessment, and coordination of remediation efforts with technical teams.

  • Serve as an escalation point for higher‑risk or cross‑functional security issues.

• Risk Assessment & Control Oversight

  • Conduct and support security risk assessments across the GFiT environment, identifying control gaps and recommending risk‑based remediation strategies.

  • Evaluate the security impact of system changes, new applications, and enhancements, ensuring risks are identified and addressed early in the lifecycle.

  • Support ongoing ITGC and SOX control execution related to security monitoring, access management, and incident response.

• Implementation & Change Support

  • Act as a security subject‑matter expert during implementations of new applications, integrations, and infrastructure changes, advising on secure design and configuration.

  • Review and assess security requirements, technical designs, and change requests to ensure alignment with corporate security standards and policies.

  • Partner with application, infrastructure, and PMO teams to ensure security considerations are embedded into delivery plans.

• Audit, Compliance & Documentation

  • Serve as a key point of contact for internal and external auditors, supporting walkthroughs, evidence collection, and remediation discussions related to financial systems security.

  • Review and validate security documentation, procedures, and evidence to ensure audit readiness and consistency.

  • Identify opportunities to strengthen control design, documentation quality, and audit efficiency.

• Continuous Improvement

  • Provide guidance to GFiT team members, supporting knowledge sharing and skill development.

  • Contribute to the development and refinement of security standards, procedures, and operational practices within GFiT.

  • Proactively identify opportunities to improve security monitoring, reporting, and operational effectiveness and raise to GFiT leadership.

• Performs other duties as assigned

• Bachelor's degree in Information Technology, Computer Science, Systems Management or a related field.

• Professional certification in compliance or financial systems (e.g., GIFS, CISM, CEH, SSCP) is preferred.

• Strong analytical and problem-solving skills.

• Ability to work independently and as part of a team

• Excellent communication and interpersonal skills, with the ability to liaise effectively with internal and external security/audit representatives.

• Minimum of 7 years of experience in IT Security, Security Operations, IT Audit and/or compliance of financial systems.

• Proven track record of managing security initiatives and regulatory assessments.

• Experience with security/regulatory standards and best practices in financial systems.

• Familiarity with financial systems and security tools.

• This position is classified as “remote.” As a remote role, it allows employees to work full-time from their home. It may also require regular travel to…