Our client, a leading Professional services company is looking to hire a Security Analyst to join the team in Los Angeles.
The Security Analyst is a member of the IT Security Team and provides first level support by
responding to IT Security issues and requests. The Analyst shall ensure that each of client’s IT Security policies are correctly implemented in IT department operations. The position is also responsible for helping the IT Security Team
protect the confidentiality, integrity, and availability of firm systems and data.
–Third-party vendor management, reviewing vendor security assessments, compliance documentation, and tracking vendor risks and remediation efforts.
— Reviewing and responding to client security questionnaires.
— Reviewing client outside counsel guidelines and managing client special data handling
provisions.
— Triaging and prioritizing IT security incidents and alerts from the client’s security information
and event management (SIEM) platform.
— Investigating and analyzing security event logs.
— Triaging security alerts from the client’s endpoint detection platform.
— Investigating and responding to security incidents and following incident handling
playbooks.
— Continually improving the client’s incident response plan and handling playbooks resulting
from lessons learned.
– Administering security awareness training and simulated phishing campaigns.
— Reviewing, analyzing, and vetting the security of new software installation requests.
— Implementing new IT Security technologies, processes, and procedures to continually
improve the client’s security posture.
— Administering technology utilized as part of the client’s data loss prevention program.
— Mitigating risk by administering security updates and patches as required by the client’s
Vulnerability and Patch Management Policy.
— Documenting and continually improving the firm’s IT Security processes and procedures.
— Collaborating with IT Security Engineers on engineering projects, identifying areas of
improvement, and researching innovative technologies, products, and solutions to enhance
workflow and performance.
— Resolving escalated end-user calls presented from the client’s HelpDesk by phone, email, or
face-to-face interactions regarding security issues.
— Monitoring the IT Security ticket queue dashboard and resolving all assigned and escalated
incident tickets to according to the firm”s Service Level Agreements and documented in the
firm”s IT Service Management System.
— Staying current on information security news, trends, and standards.
MINIMUM REQUIREMENTS
— 2 years of prior security experience in a large enterprise client or professional services firm (law firm experience preferred).
— Experience with third party vendor management process
— Experience conducting security audits/assessments
— Security+, SSCP, CISSP, or other security certifications.
— Experience with managing client security relationships.
— Experience with product evaluation, project management, and managing vendor
relationships.
— Experience with endpoint detection management platforms.
DESIRED QUALIFICATIONS
Bachelor’s Degree or equivalent work experience.
Ability to communicate complex technical information to non-technical, technical, and
managerial audiences both written and orally.
Ability to perform due diligence and act with due care in support of the client’s Information
Security Program.
Ability to quickly and effectively when called to act in high-pressure situations.
Skilled customer relations with vendors and internal users, critically reviewing statements
of work, complex business contracts, and the ability to negotiate pricing and agreements
optimal to the firm.
Excellent communication skills, including the ability to always interact effectively with a
diverse range of personnel in a calm and professional manner, particularly under pressure.
Excellent time management, prioritization, and organizational skills, including the ability to
manage multiple assignments simultaneously, take ownership, and effectively execute
deliverables in a fast-paced and high-pressure environment.
Team player with a keen customer service ethos.
Reliable and consistent attendance.