Assistant Vice President, Info Security

Conning•Hartford, CT

12d

About The Position

Conning is a leading global investment management firm with a long history of serving the insurance industry. We develop customized investment strategies that address our clients’ unique objectives, requirements and tolerance for risk. We develop solutions by leveraging Conning’s risk management tools and utilizing a highly disciplined investment process that relies on fundamental analysis. Reporting to the Director, Information Security, the Information Security Engineer supports Conning’s Information Security Program (“ISP”) through the design, implementation, management and maintenance of the Firm’s security infrastructure and supporting operational functions. The role is a blend of hands-on technical engineering, conceptual design and application of security controls, proactive threat analysis, and cybersecurity incident response. Responsibilities will include, but not be limited to: ownership and support of key security capabilities and vendor relationships; providing oversight of security assurance functions; performance and/or oversight of technical security assessments; leading, executing and continuously improving cybersecurity incident response plans. Conning is a leading global investment management firm with a long history of serving the insurance industry. We develop customized investment strategies that address our clients’ unique objectives, requirements and tolerance for risk. We develop solutions by leveraging Conning’s risk management tools and utilizing a highly disciplined investment process that relies on fundamental analysis.

Requirements

Bachelor’s Degree in Information Technology, Information Security or related concentration
Knowledge of cybersecurity frameworks, best practices, standard concepts, and procedures
5 years’ experience in the implementation and management of security software, technology, and related programs
Strong written and verbal communications skills required
Strong working knowledge of Microsoft applications and operating systems
Experience and working knowledge of: o Software Configuration and Vulnerability management o Security infrastructure and engineering concepts o Common security control frameworks (e.g., NIST, ISO, MITRE, etc.); o Cloud security
Applicants must exhibit a strong commitment to meet compliance obligations reflecting Conning's core values of honesty and integrity; must accept responsibility for compliance in each role and comply with all applicable rules, regulations, and legal requirements.

Nice To Haves

Preferred experience with security technologies including, but not limited to: Tenable, CyberArk, Varonis, Proofpoint, Microsoft cybersecurity solutions (e.g., Entra, Defender, Sentinel, Purview, etc.), CrowdStrike, SumoLogic, Cisco, Fortinet

Responsibilities

Directly manage and ensure successful delivery of cybersecurity projects and solutions to identified threats, vulnerabilities and risks
Work collaboratively with IT and business stakeholders in providing security engineering support for non-security projects and initiatives
Provide direction to and oversight of one (“1”) or more team members
Facilitate stakeholder working groups in support of operational security functions
Manage the Firm’s portfolio of production security products and vendor relationships to ensure continued effectiveness
Conduct technical security assessments of software and systems in support of internal and Third-party risk management processes
Provide input into/assist in updating security control information in internal and third-party risk and control assessments
Facilitate engagements with external third parties in the performance of technical security testing (e.g., penetration testing)
Create and maintain system and process security documentation
Provide reports on project and operational performance to management as required.
Stay up to date on relevant cyber security threats, tools and techniques.
Position should be able to complete assigned tasks with minimal direction.