Senior Incident Responder

Focus Financial Partners•Boston, MA

2d•$100,000 - $120,000

About The Position

Focus Financial Partners is seeking a Senior Incident Responder. This role will be responsible for supporting and enhancing the execution of the firm’s incident response plan, as well as being a subject matter expert in data security, and leading individual incidents. This role works to ensure that issues of data security and integrity are properly investigated, remediated and the overall security of the firm is enhanced after each incident. This role can be based in St Louis. MO; Boston, MA.

Requirements

Bachelor's degree in Information Security, Cybersecurity, Computer Science, or a related field.
5-8 years of experience in cybersecurity, with at least 3 years in a financial services setting (e.g., banking, asset management, fintech, insurance) preferred.
3-5 years of experience in either Incident Response or Cyber Forensics.
In-depth understanding of financial regulatory requirements impacting cybersecurity (e.g., NYDFS Part 500, GLBA, SOX, FFIEC, GDPR)
Exceptional communication skills in fast-moving and high stress situations
Ability and willingness to take the lead in complex, evolving situations with multiple stakeholders

Nice To Haves

Master’s preferred.
Relevant certifications such as CISSP, GCIH or similar are preferred.

Responsibilities

Enhance incident response processes and procedures to ensure robust response to internal and external threats.
Track ongoing incidents and ensure that all involved parties are performing as expected as response progresses
Track key performance indicators (KPIs) to identify issues and bottlenecks within incident response.
Recommend and support implementation of cyber risk tools and platforms for incident response, communication and remediation
Assist with third-party risk assessments related to cybersecurity, including cloud providers, SaaS vendors, and managed services.
Stay informed on current and emerging cybersecurity threats, regulatory changes (e.g., NIST, ISO 27001, NYDFS, GDPR), and best practices.
Drive incident response readiness and response and conduct tabletop exercises focused on cyber risk impacts.