Information Security Analyst

Stifel•Saint Louis, MO

About The Position

The Information Security Analyst reports to the Chief Information Security Officer (CISO) and is responsible for supporting aspects of the security program, including regulatory reporting, metrics and KPIs, training and awareness, security process integration, and risk management. The role supports day-to-day security activities, risk and request management, reporting, security exercises, control testing, and the operation of existing security technologies and controls.

Requirements

Understanding of information security principles, processes, and tools, and current industry awareness.
Knowledge of NIST (800-53, CSF) and other information security frameworks.
Understanding of the financial services regulatory environment.
Strong analytical skills, logical thinking, and diagramming capability.
Strong interpersonal and customer service skills, with the ability to work with technical and non-technical personnel across departments and levels.
Excellent organizational skills, ability to prioritize multiple tasks and meet deadlines, and strong attention to detail.
Experience working in an ITIL-focused support organization with incident/request tickets.
Ability to work flexible schedules, including availability outside normal working hours.
Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent experience in IT or Risk Management.
Preferred: 1+ years of experience in an information security role.
Understanding of enterprise security monitoring, logging, and SIEM platforms.
Experience with Microsoft 365 and related productivity and collaboration tools.

Nice To Haves

Knowledge of data privacy regulations.
Security+, ISC2 CC, or similar certifications.
Exposure to AI tools or platforms such as Microsoft Copilot, ChatGPT, or Azure AI.

Responsibilities

Support day-to-day information security activities, including monitoring, analysis, and issue tracking.
Assist in identifying, documenting, and escalating information security risks using the firm’s risk management framework.
Assist with intake and triage of information security requests and the creation of risk reports.
Gather, maintain, and support reporting of information security metrics and KPIs, ensuring data accuracy and completeness.
Support integration of information security requirements into business processes, projects, and technology initiatives.
Assist with planning, execution, and documentation of security exercises, control testing, and risk reviews.
Follow established information security policies, standards, and procedures and assist with maintaining alignment across governance documents.
Support the operation and lifecycle management of existing security technologies and controls under supervision.