Senior Security Analyst

Janus Henderson•Denver, CO

7d•Hybrid

About The Position

The Senior Security Analyst will assist with the development, implementation, and communication of policies, standards, and procedures. This role involves integrating regulatory compliance and legal requirements into organizational security controls, and driving the evolution and improvement of information security controls. The analyst will evaluate and implement solutions to meet information security requirements, and develop and maintain information security standards in collaboration with IT Infrastructure teams. Additionally, the role includes conducting risk assessments for IT and business changes, acting as a key advisor to IT and business functions, and communicating information security concepts and risks to non-technical audiences. The position also involves producing management information (MI) on information security, performing due diligence and risk assessments on third-party vendors, identifying potential security risks and documenting remediation options, and assisting with security incident management activities.

Requirements

Excellent written and verbal communication and good interpersonal skills
Ability to communicate effectively with all levels of management and staff as well as outside vendors, contractors, service providers and consultants
Initiative and willingness to seek and achieve improvements to processes and technology
Broad and up-to-date knowledge of: Microsoft client and server operating environments
Active Directory and Group Policy
Cloud Security
Digital Rights Management / Information Rights Management
Data Classification/Data Loss Prevention technologies
Mobile Device Management (MDM) & Mobile Application Management (MAM)
Security Incident & Event Management (SIEM)
Traditional and sophisticated Malware Protection technologies
Secure web gateway and web proxy solutions
Vulnerability Management
Security Incident Management & Response
Threat Intelligence
Willingness to adhere to the provisions of our Investment Advisory Code of Ethics related to personal securities activities and other disclosure and certification requirements, including past political contributions and political activities.
Understanding of the regulatory obligations of the firm, and abide by the regulated entity requirements and JHI policies applicable for your role.

Nice To Haves

Experience of communication protocols, a sound grasp of integrated, highly fault tolerant, business critical, complex server / network environments and architecture
Knowledge of ISO27001 or NIST Cyber Security Framework and the associated controls
Knowledge of wide area network security as it pertains to networking protocols and connectivity to/from outside resources (switches, routers, firewalls, VPNs, encryption, and authentication methods)
Knowledge of SQL, and modern scripting languages

Responsibilities

Assist with the development, implementation and communication of policies, standards, and procedures
Assist in integrating regulatory compliance and legal requirements into organisational security controls
Information Security control evolution and improvement
Evaluate and implement solutions in support of Information Security requirements
Develop and maintain Information Security standards in conjunction with the IT Infrastructure teams
Conduct risk assessments for all relevant aspects of IT and business change
Operate in a key advisory role for both IT and business functions
Connect with non-technical audiences on Information Security concepts and risks
Produce and deliver Information Security focused management information (MI)
Perform due diligence and risk assessments of third-party vendors
Identify potential security risks, and document remediation options or mitigating controls
Assist and guide security incident management activities
Carry out additional duties as assigned

Benefits

Hybrid working and reasonable accommodations
Generous Holiday policies
Excellent Health and Wellbeing benefits including corporate membership to Wellhub
Paid volunteer time to step away from your desk and into the community
Support to grow through professional development courses, tuition/qualification reimbursement and more
Maternal/paternal leave benefits and family services
Unique employee events and programs including a 14er challenge
Complimentary beverages, snacks and all employee Happy Hours
Annual Bonus Opportunity: Position may be eligible to receive an annual discretionary bonus award from the profit pool.
competitive compensation
pension/retirement plans
various health, wellbeing and lifestyle benefits