Cybersecurity Analyst

**Job Description** The Cybersecurity Analyst plays a key role in monitoring, analyzing, and strengthening the organization's cybersecurity posture. This role is responsible for threat detection, incident response, vulnerability management, and supporting IT audits. The ideal candidate will have strong technical expertise, knowledge of security best practices, and experience supporting audits in a financial services environment. The candidate should have a deep understanding of various information security technologies and approaches, enabling them to conduct accurate security assessments and ensure robust protection of critical systems and data. **Key Responsibilities** **Security Monitoring \& Incident Response** · Continuously monitor security alerts and logs using SIEM tools to detect and respond to threats. · Investigate security incidents, conduct forensic analysis, and escalate issues as necessary. · Assist in the development and execution of the Incident Response Plan (IRP), including participation in tabletop exercises. · Analyze phishing attempts, malware threats, and unauthorized access activities. · Ensure security playbooks and standard operating procedures (SOPs) are maintained and updated. **IT Audit Support \& Compliance Monitoring** · Support internal and external IT audits by collecting security evidence, logs, and documentation. · Assist in conducting User Access Reviews (UARs) to ensure least privilege access is enforced. · Work with IT teams to provide documentation on vulnerability management, patching, and security controls. · Ensure adherence to industry security frameworks such as NIST 800\-53, ISO 27001, CIS Controls, and FFIEC IT Examination Handbook. · Provide auditors with information on log retention, incident handling, and security monitoring processes. · Assist in ensuring third\-party vendors meet security requirements, including security due diligence assessments. **Vulnerability \& Risk Management** · Conduct vulnerability scans using tools and work with IT teams to remediate findings. · Perform risk assessments and document potential security gaps, providing recommendations for mitigation. · Ensure that patch management policies are followed, and security updates are implemented. · Assist in managing endpoint security tools, such as EDR, anti\-malware, and application whitelisting solutions. **Security Awareness \& Architecture Assessments** · Perform security assessments and provide recommendations for enhancing security controls across the organization. · Work closely with IT teams to ensure proper firewall configurations, IDS/IPS rules, and VPN security settings. · Conduct assessments on Data Loss Prevention (DLP), Web Application Firewalls (WAF), and Endpoint Detection \& Response (EDR) tools to improve security resilience. · Assist in application security assessments by reviewing secure coding practices and vulnerability scans. · Ensure security best practices are implemented acr