IT Security Analyst

Software Guidance & Assistance, Inc., (SGA), is searching for an Information Security Analyst for a contract assignment working on an IT Cyber Security team with one of our premier financial services clients in lower Manhattan, NYC. This would be a 6 month contractor assignment working mostly remote, however, there will be an occasional need (1-2x/month) to be in the office so best if the contractor lived in the NYC metropolitan area.

An additional resource is necessary due to increased workload, competing regulatory projects, and the need to keep all projects on track. We are seeking a self-starter who can immediately contribute to the threat risk assessment process, security advisory services including support for regulatory requirements and projects.
Responsibilities :

• Assist with the completion of Security Risk Assessments (TRAs) for the U.S. application technology landscape.
• Conduct cyber security risk assessments on internal applications.
• Review responses and evidence (e.g., policies, reports, procedures, etc.)
• Communicate risk assessment issues to appropriate stakeholders, ensuring their understanding of associated risks and actions needed to remediate those risks
• Help prepare risk assessment testing results and communicate to management
• Follow up with the internal app owner to ensure identified risks are addressed
• Ensure compliance with enterprise policies and procedures
• Support and participate in control testing internally where necessary

Required Skills:

• 3-5+ years as an IT Security Analyst or related Cyber Security position.
• Experience working in medium to large entities.
• Experience working in a US Investment Bank and knowing U.S. Regulatory Cybersecurity requirements for financial services
• Recent experience working directly on Threat and Risk Assessments (TRA)
• An understanding and experience with security controls/mechanisms and threat/risk assessment techniques pertaining to complex data, application and networking environments (asset), proven through recent experience in the last 1+ project(s).
• Proficiency in MS Office
• Exposure to Cyber Security fundamentals
• Control testing experience
• CISSP CERTIFICATION ( "more important than CISA cert ")

Soft Skills:

• Excellent communications skills
• The candidate must have an open mind when it comes to approach and be able to assess each situation separately
• Ability to manage assigned tasks and expectations without direct instruction or oversight
• A fast, adaptable learner who can hit the ground running
• Strong problem-solving skills as the TRA process can be meticulous in nature
• Ability to work well under pressure while demonstrating strong professionalism
• Must be able to collaborate closely with a team at times, while also being capable of holding themselves accountable to meet individual deadlines without hand holding

Preferred Skills :

• IT/Cyber Audit background
• Undergraduate or Masters Degree in Cybersecurity or Information Security
• Proficiency in MS Office (extended knowledge of MS Excel is preferred)

SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at .

SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, and our services, programs, and activities. Please visit our company to request an accommodation or assistance regarding our policy.