Information Security Analyst

Stifel•St. Louis, MO

About The Position

The Information Security Analyst reports to the Chief Information Security Officer (CISO) and supports specific aspects of Stifel’s information security program, including regulatory reporting, metrics and KPIs, training and awareness, security process integration, and risk management. The role supports day-to-day information security activities and helps identify, document, and escalate risks using the firm’s risk management framework. It also assists with request intake and triage, risk reporting, control testing, security exercises, and the integration of security requirements into business processes, projects, and technology initiatives. The analyst follows established security policies, standards, and procedures; helps maintain alignment across governance documents; and supports the operation and lifecycle management of existing security technologies and controls under supervision. The position calls for knowledge of information security principles and frameworks, awareness of financial services regulations, analytical and organizational skills, and the ability to work with technical and non-technical colleagues. Flexible scheduling, including availability outside normal working hours, is required. Stifel describes itself as a global wealth management and investment banking firm with a history of more than 130 years and approximately 9,000 employees. It offers an entrepreneurial environment and a comprehensive benefits package.

Requirements

Understanding of information security principles, processes, tools, and current industry developments.
Knowledge of NIST (800-53, CSF) and other information security frameworks.
Understanding of the financial services regulatory environment.
Strong analytical skills, logical thinking, and diagramming capability.
Strong interpersonal and customer service skills, including the ability to work with personnel across departments and levels, both technical and non-technical.
Excellent organizational skills, ability to prioritize multiple tasks and meet deadlines, and attention to detail.
Experience working in an ITIL-focused support organization with incident/request tickets.
Ability to work flexible schedules, including availability outside normal working hours.
Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent experience in IT or Risk Management.

Nice To Haves

At least 1 year of experience in an information security role.
Knowledge of data privacy regulations.
Security+, ISC2 CC, or similar certification.
Exposure to AI tools or platforms such as Microsoft Copilot, ChatGPT, or Azure AI.

Responsibilities

Support day-to-day information security activities, including monitoring, analysis, and issue tracking.
Assist in identifying, documenting, and escalating information security risks using the firm’s risk management framework.
Assist with intake and triage of information security requests and the creation of risk reports.
Gather, maintain, and support reporting of information security metrics and KPIs, ensuring data accuracy and completeness.
Support integration of information security requirements into business processes, projects, and technology initiatives.
Assist with planning, execution, and documentation of security exercises, control testing, and risk reviews.
Follow established information security policies, standards, and procedures and assist with maintaining alignment across governance documents.
Support the operation and lifecycle management of existing security technologies and controls under supervision.