Principal Analyst, IT Security

Raymond James•Saint Petersburg, FL

5d•Hybrid

About The Position

Oversees the development, implementation, and maintenance of data protection / privacy program, policies, plans, procedures. This role is a hybrid workstyle: with the associate expected to work from a Raymond James office location at least three days per week, including either Monday or Friday. Raymond James’ work environment is designed to reinforce our values-based culture while supporting the competitiveness, profitability, and long-term growth of our firm. Please note: This role is not eligible for Work Visa sponsorship, either currently or in the future.

Requirements

Strong experience with IT compliance, audit, risk management, and operational controls, including audit representation, evidence collection, findings management, and remediation.
Proven ability to drive vulnerability management and remediation, including prioritization, tracking, validation, and resolution within established SLAs.
Experience developing and maintaining SOPs, technical standards, and controls, with measurable improvements in compliance and audit readiness.
Ability to establish and track compliance KPIs, including vulnerability remediation SLAs, aging findings, audit action closure, control effectiveness, and overdue remediation.
Strong understanding of enterprise networking and network security, including routing, switching, firewalls, VPN, SD-WAN, and infrastructure security controls.
Ability to demonstrate measurable outcomes such as reduced vulnerability backlog, fewer overdue findings, improved remediation timelines, and increased control compliance.
Strong communication and leadership skills, with the ability to translate compliance requirements into technical actions and drive execution across Operations, Engineering, Security, Risk, and Audit.
Team-oriented, security-first mindset with the ability to drive consistent compliance practices across global teams.

Responsibilities

Lead in detecting and analyzing security incidents, including attacks, breaches, and identified vulnerabilities, and remediate any security gaps in line with the security incident management procedure.
Contribute to the design and creation of reporting strategies and templates.
Lead execution of complex reports, identifying and interpreting complex patterns and trends, and translating those insights into actionable recommendations.
Design and implement disaster recovery and contingency plans to protect company data.
Monitor and review performance and behaviors within area of responsibility to identify and resolve noncompliance with the organization's policies and relevant regulatory codes and codes of conduct.