Info Security Analyst - Senior

Overview

Our financial services client is seeking a Security Analyst with strong experience in digital asset security, blockchain ecosystems, and technology risk. This position sits within the Technology Risk, Cybersecurity & Compliance (TRACC) organization and partners closely with business groups launching cryptocurrency and digital-asset-related products.

This role functions as a cybersecurity advisor/analyst‑conducting risk assessments, overseeing vendor controls, enabling policy compliance, and supporting regulatory, audit, and incident response activities related to digital assets. Ideal candidates have deep understanding of crypto custody, wallet security, blockchain integrations, and financial sector cybersecurity standards.

• Partner with Digital Asset business units to align security requirements with product strategies
• Interpret cybersecurity policies into actionable guidance
• Participate in project reviews, architecture sessions, and security planning
• Support risk exceptions, acceptance, and mitigation processes

• Perform end-to-end risk assessments for crypto custody, wallet operations, blockchain integrations, and related technologies
• Assess risks around key management, smart contracts, blockchain nodes, and transaction processes
• Document risks, define compensating controls, and track remediation

• Manage the security oversight lifecycle for digital asset vendors
• Review SOC 2s, pentests, cloud posture, and security questionnaires
• Ensure contracts include appropriate cybersecurity, privacy, and regulatory controls
• Track and drive closure of vendor findings

• Train internal teams on cybersecurity policies and secure development practices
• Develop crypto-specific security guidance and education

• Prepare for internal/external audits
• Validate control effectiveness and evidence quality
• Support alignment with regulatory expectations (SEC, FINRA, OCC, FFIEC, etc.)

• Collaborate with Cyber Ops and IR on crypto‑related scenarios
• Support playbooks for key compromise, vendor breaches, blockchain outages, and on‑chain exploits

• Produce reports on residual risk, vendor posture, KRIs, assessments, and audits
• Present risk insights to business and cybersecurity leadership

• Bachelor's degree in Information Security, Computer Science, Engineering, or related field
• 7+ years in cybersecurity or technology risk
• Experience with digital assets, blockchain, or crypto security models
• Understanding of NIST CSF, NIST 800‑53, SOC 2, FFIEC
• Strong communication skills and risk articulation ability

• Certifications:
  
  CISSP, CISM, CRISC, CCSP, CISA, etc.
• Blockchain/digital asset training or credentials
• Knowledge of key management, smart contract risk, cloud security
• Experience with GRC platforms

This is a Contract position based out of Southlake, TX.

The pay range for this position is $53.00 - $55.00/hr.

Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following:

• Medical, dental & vision
• Critical Illness, Accident, and Hospital
• 401(k) Retirement Plan - Pre‑tax and Roth post‑tax contributions available
• Life Insurance (Voluntary Life & AD&D for the employee and dependents)
• Short and long‑term disability
• Health Spending Account (HSA)
• Transportation benefits
• Employee Assistance Program
• Time Off/Leave (PTO, Vacation or Sick Leave)

This position is anticipated to close on Feb 28, 2026.

This is a hybrid position in Southlake, TX.

The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.