Cyber Security Specialist

Society of Actuaries Research Institute•Chicago, IL

4d•$110,000 - $115,000•Hybrid

About The Position

The Cyber Security Specialist is responsible for defending the organization from cyber security threats and risks facing any organizational asset or business function, while pro-actively monitoring the environment and enforcing security standards and procedures. Recommends changes to the organization’s technology infrastructure, software, equipment, or business practices to mitigate security risks. Responsible for leading the response to any incident involving security concerns, threats or data breaches.

Requirements

Bachelor’s degree in computer information systems, Computer Science, or related field is required
5-7 years of experience in the information technology services industry is required, including at least 3 years in a security-related role, and at least 3 years in a system and/or network administrator role
Active (or currently pursuing) Comp TIA Security + security credential or equivalent
Hands-on technical expertise is required
Ability to work within SOA’s standardized, Windows-based technology environment and established device policies.

Responsibilities

Operate and manage core security systems, including SIEM, endpoint protection, vulnerability management, DLP, password management, security awareness, and external threat monitoring tools.
Maintain security logging, monitoring, and alerts across endpoints, networks, cloud infrastructure, Microsoft 365, applications, and critical systems.
Investigate security incidents, lead containment, eradication, and recovery efforts, and document findings, evidence, lessons learned, and corrective actions.
Develop security dashboards, reports, scripts, and automation to improve threat detection, response, and operational efficiency.
Conduct vulnerability scans across internal systems, cloud environments, external-facing assets, applications, and third-party services.
Assess vulnerabilities, security advisories, and emerging threats; prioritize risks and lead remediation tracking and validation.
Lead penetration testing and external security assessments, including scoping, vendor coordination, and validation of findings.
Perform required PCI scans and coordinate resolution of identified exceptions.
Maintain cybersecurity policies, standards, procedures, the Information Security Plan, and Cyber Security Incident Response Plan.
Conduct security risk assessments and support audits, control reviews, and compliance activities, including PCI and applicable data protection requirements.
Maintain security risk and exception records, including remediation commitments, ownership, deadlines, and closure evidence.
Manage third-party security risk reviews, including vendor documentation, security-related contract provisions, and follow-up actions.
Develop cybersecurity metrics, reports, and presentations for technical and business stakeholders.
Lead security awareness initiatives, including new-hire training, annual training, phishing simulations, and employee communications.
Evaluate security technologies, recommend improvements, and lead cybersecurity projects involving internal teams and external vendors.
Provide occasional after-hours support for significant cybersecurity incidents and communicate security requirements and findings effectively to technical and non-technical stakeholders.