Cyber Security Analyst

M Financial Group•Dallas, TX

17h•Hybrid

About The Position

The Cyber Security Analyst (CSA) is responsible for monitoring, tracking, and supporting the remediation of cybersecurity and compliance issues across both M Financial and Member Firms. The CSA assists in ensuring that systems, processes, and controls remain aligned with applicable security standards, regulatory requirements, and organizational policies. This role supports the identification, assessment, and documentation of regulatory compliance obligations, information security risks, control deficiencies, and cybersecurity best practices. The CSA also helps evaluate compliance with the Member Firm Information Security Policy (MFISP) and contributes to ongoing efforts to strengthen the organization's overall security and compliance posture.

Requirements

Bachelor's degree required
1–3 years in information security and security compliance
Working knowledge of NIST CSF, SEC, SOC 2, and FINRA standards
Strong analytical/critical-thinking skills and high attention to detail
Ability to build relationships with internal and external stakeholders quickly
Comfortable presenting to groups of varying size and technical fluency
Strong written/verbal communication (reports, documentation, stakeholder and regulator correspondence)
Ability to explain technical topics to non-technical audiences
Policy comprehension and ability to train others on it
Security fundamentals: vulnerability management, risk assessment, auditing, incident response, compliance
Network applications/protocols, logging, monitoring
Problem-solving, technical troubleshooting
Self-starter with initiative, learning agility, growth mindset
Teamwork and organizational awareness

Nice To Haves

A Cybersecurity degree can offset one year of experience
Security certification and/or professional IT experience are strongly preferred (e.g., Security+, Network+)

Responsibilities

Lead response to audits from regulators, independent auditors, and third-party risk assessments (partners, carriers, brokers, cyber-insurance providers)
Ensure security controls demonstrate fulfillment of regulatory and contractual obligations
Analyze management and technical controls to verify secure configurations, documented processes, and standards
Monitor Member Firm security posture; document gaps, track progress, and follow up to ensure MFISP and regulatory compliance
Partner with Member Firms' Managed Service Providers (MSPs) to strengthen their security posture
Coordinate and facilitate Member Firm security incident reporting
Contribute to and update information security policy, standards, and controls
Support development of security processes, procedures, and SLAs
Help create standard operating procedures and protocols
Work with Core Technology and Cybersecurity teams to track remediation and vulnerability mitigation
Support security and privacy awareness training for internal and Member Firm employees
Provide security advice across the organization (controls, assessments, remediation)
Track metrics and recommend process improvements for compliance deadlines and progress
Act as the primary intake and triage resource for cybersecurity-related tickets in the Salesforce queue, ensuring timely assessment, prioritization, escalation, and coordination of incident and service requests in accordance with established procedures and service level expectations.
Stay current on security products, trends, and emerging threats
Research new security technologies to safeguard company and Member Firm data
Other duties as assigned