Information Security Analyst

The Information Security Analyst reports to the Chief Information Security Officer (CISO) and is responsible for specific aspects of the security program including regulatory reporting, metrics/KPIs, training and awareness, security process integration and risk management.

What We're Looking For

• Support day to day information security activities, including monitoring, analysis, and issue tracking.
• Assist in identifying, documenting, and escalating information security risks using the firm's risk management framework.
• Assist in intake and triage of information security requests and the creation of risk reports.
• Gather, maintain, and support reporting of information security metrics and KPIs, ensuring data accuracy and completeness.
• Support the integration of information security requirements into business processes, projects, and technology initiatives.
• Assist with the planning, execution, and documentation of security exercises, control testing, and risk reviews.
• Follow established information security policies, standards, and procedures and assist with maintaining alignment across governance documents.
• Support the operation and lifecycle management of existing security technologies and controls under supervision.

What You'll Bring

• Understanding of information security principles, processes, tools, and latest industry awareness and current knowledge.
• Knowledge of NIST (800-53, CSF) and other information security frameworks.
• Understanding of financial services regulatory environment.
• Strong analytical skills, logical thinking, and diagramming capability.
• Strong and confident interpersonal and customer service skills; ability to interface with personnel from various departments and levels, both technical and non-technical.
• Excellent organizational skills, ability to prioritize multiple tasks and meet deadlines and excellent attention to detail.
• Experience working in an ITIL focused support organization with incident/request tickets.
• Ability to work flexible schedules including availability outside of normal working hours.
• Knowledge of data privacy regulations is a plus.

Education & Experience

• Minimum Required: Bachelor's degree in Information Technology, Computer Science, or related field, or equivalent experience in IT or Risk Management.
• Minimum Preferred: 1+ years of experience in an information security role.

Licenses & Credentials

• Preferred: Security+, ISC2 CC, or similar certifications.

Systems & Technology

• Understanding of enterprise security monitoring, logging, and SIEM platforms.
• Experience with Microsoft 365 and related productivity and collaboration tools.
• Exposure to AI tools or platforms such as Microsoft Copilot, ChatGPT, or Azure AI is preferred.

About Stifel

Stifel is more than 130 years old and still thinking like a start-up. We are a global wealth management and investment banking firm serious about innovation and fresh ideas. Built on a simple premise of safeguarding our clients' money as if it were our own, coined by our namesake, Herman Stifel, our success is intimately tied to our commitment to helping families, companies, and municipalities find their own success.

While our headquarters is in St. Louis, we have offices in New York, San Francisco, Baltimore, London, Frankfurt, Toronto, and more than 400 other locations. Stifel is home to approximately 9,000 individuals who are currently building their careers as financial advisors, research analysts, project managers, marketing specialists, developers, bankers, operations associates, among hundreds more. Let's talk about how you can find your place here at Stifel, where success meets success.

At Stifel we offer an entrepreneurial environment, comprehensive benefits package to include health, dental and vision care, 401k, wellness initiatives, life insurance, and paid time off.

Stifel is an Equal Opportunity Employer.