Position:Information Security Analyst
Department:511240 Information Tech (CIO)
Location:Boston
Job Description:Position Summary:The Information Security team is responsible for protecting our information assets. As a member of the Information Security team, the successful candidate will design, maintain, and enforce policies and procedures that protect Boston Partners' data and systems from all forms of security threats. The successful candidate should have strong analytical skills and in-depth knowledge of best practices for preventing a wide range of security threats. The primary responsibilities are listed below.
Primary Responsibilities:- Hands-on operational security role covering event detection and response.
- Information security policy design and maintenance.
- Risk management including vendor risk management.
- Security awareness training.
- Threat intelligence and vulnerability management.
- Audit support, including risk assessments, client due diligence questionnaires, and evidence collection.
- Identity and access management.
- Endpoint security.
- Data privacy and data protection.
- Support the secure, compliant adoption of AI tools.
Qualifications:- Minimum of a bachelor's degree in computer science or equivalent.
- Professional certification; CISSP preferred.
- Five or more years of relevant cybersecurity experience.
- Familiarity with AI security, AI governance, or emerging AI risk management frameworks such as NIST AI RMF.
- Working knowledge of Microsoft 365 security and compliance tools, including Microsoft Purview, Defender, Entra ID, sensitivity labels, DLP, and auditing and logging capabilities, preferred.
- Conscientious and detail oriented.
- Strong documentation and writing skills.
- Strong communication and interpersonal skills.
- Experience working as part of a project team and taking ownership of task deliverables within a project setting.
- Ability to work independently and be a self-starter.
- Financial services industry experience preferred.
Special Requirements:- The position may require work beyond regular business hours, including participating in a weekly on-call rotation to respond to security alerts during non-business hours as needed.
Compensation: The pay range for this position is $125,000-$175,000.
It is not typical for offers to be made at or near the top of the range. Salary offers are based on a wide range of factors including relevant skills, training, experience, education, and where applicable, licensure or certification obtained. Market and Firm factors are also considered.
In addition to the base salary and a generous employee benefits package, successful candidates are eligible to receive a discretionary bonus.
The above declarations are not intended to be an all-inclusive list of the duties and responsibilities of the job described, nor are they purported to be such a listing of the skills and abilities required to do the job. Rather, they are only meant to describe the general nature of the job.
