Senior Information Security Analyst

Stifel Financial - Saint Louis, MO

Full-time - Senior

Saint Louis, MO

5,001-10,000 employees

Securities, Commodity Contracts, and Other Financial Investments and Related Activities

About the position

The Senior Information Security Analyst plays a critical role in supporting the information security strategy at Stifel. Reporting directly to the Chief Information Security Officer (CISO), this position is responsible for assessing and mitigating security risks, monitoring for threats, developing security policies and procedures, and ensuring compliance with regulatory requirements. The ideal candidate will have a strategic mindset, advanced technical skills, and a deep understanding of cybersecurity trends and regulations.

Responsibilities

• Develop, maintain, and enforce information security policies, standards, and guidelines.
• Work with IT, legal, compliance, and business units to integrate security measures into all aspects of the organization's operations.
• Provide guidance on security practices and assist in awareness training.
• Identify, assess, and mitigate security risks, developing remediation plans to address identified risks.
• Maintain in-depth knowledge of regulatory compliance requirements, such as FINRA, SEC, PCI-DSS, and applicable laws.
• Assist in audits and ensure compliance with relevant regulations.
• Evaluate, recommend, and implement security technologies and solutions to enhance the security posture.
• Stay current on the latest cybersecurity threats, trends, and technologies, continuously evaluating the threat landscape and recommending improvements.
• Gather and analyze information security KPIs.

Requirements

• Bachelor's degree in information technology, Computer Science, or equivalent combination of cybersecurity certifications and experience.
• 6+ years of experience in information security.
• Proven ability in information security principles, processes, tools, and the latest industry awareness and current knowledge.
• Strong knowledge of NIST (800-53, CSF) and other information security frameworks.
• Understanding of financial services regulatory environment.
• Experience with formal risk management.
• Excellent analytical skills, logical thinking, and diagramming capability.
• Strong and confident interpersonal and customer service skills; ability to interface with personnel from various departments and levels, both technical and non-technical.
• Excellent organizational skills with the ability to prioritize multiple tasks and meet deadlines.

Nice-to-haves

• Knowledge of data privacy regulations is preferred.
• Experience working in an ITIL-focused support organization with incident/request tickets.
• Ability to work flexible schedules, including availability outside of normal working hours.

Benefits

• Health, dental and vision care
• 401k
• Wellness initiatives
• Life insurance
• Paid time off