StPetersburgRecruiter Since 2001
the smart solution for St. Petersburg jobs

Senior IT Security TRA Analyst

Company: Raymond James
Location: Saint Petersburg
Posted on: January 15, 2022

Job Description:

Job Summary:

Conducts IT risk assessments, evaluates the effectiveness of existing controls, researches solutions to mitigate risk, and supports the implementation of risk reduction strategies. Conducts threat modeling to support risk analysis. Builds and maintains "Trusted Advisor" status as a foundation for achieving influence and obtaining commitment from IT teams and business units. Provides feedback to management and process owners on the design and effectiveness of technology control processes. Serves as the technical expert on a dynamic team to support analysis of risks identified through policy deviations, security assessments, and audit results. Works cross-functionally to lead risk reduction strategies across the firm. Integrates with development teams to incorporate security and compliance into the development lifecycle and recommend risk reduction strategies. Able to support security architecture design across all aspects of information technology. Is able to make judgments and recommendations based on the analysis and interpretation of data.

Essential Duties and Responsibilities:
Seeks understanding of risks and procedures sufficient to understand the reasons for tasks being performed.
Conducts threat modeling to ensure proper scope and analysis of risk passements to ensure relevance to the firm.
Serves as a senior information technology risk advisor, participating in IT processes and activities (e.g., planning, systems development and product selection, etc.).
Supports technical risk analysis within the team to ensure proper tracking and resolution based on security assessment results, non-compliance to policies, and audit recommendations.
Advises process owners on the design and implementation of IT controls (manual and automated) into processes and systems using knowledge of risks and company objectives.
Identifies risk reductions strategies and advises system and application owners on implementation
Develops and uses basic interview techniques and participates in facilitated risk identification sessions.
Analyzes controls for adequacy of design and performs and/or supports control assurance testing activities for initial validation.
Works closely with internal and external auditors, regulators, and examiners, including coordination and compilation of technology documentation requests, reports, and assurance letters to ensure IT compliance.
Performs other duties and responsibilities as assigned.

Raymond James Guiding Behaviors

At Raymond James our associates use five guiding behaviors (Develop, Collaborate, Decide, Deliver, Improve) to deliver on the firm's core values of client-first, integrity, independence and a conservative, long-term view.

We expect our associates at all levels to:
Grow professionally and inspire others to do the same
Work with and through others to achieve desired outcomes
Make prompt, pragmatic choices and act with the client in mind
Take ownership and hold themselves and others accountable for delivering results that matter
Contribute to the continuous evolution of the firm

At Raymond James - we honor, value, respect the uniqueness, experiences, and backgrounds of all of our Associates. When associates bring their best authentic self, our organization, clients and communities thrive, it is part of our part of our people-first culture. The Company is an equal opportunity employer and makes all employment decisions on the basis of merit and business needs.

Job

Technology

Primary Location

US-FL-St. Petersburg-Saint Petersburg

Other Locations

US-TN-Memphis-Memphis, US-MI-Southfield-Southfield

Organization

Technology

Schedule

Full-time

Shift

Day Job

Travel

No

Eligible for Discretionary Bonus

Yes

Education/Previous Experience:
Minimum of a Bachelor's degree in Computer Science, Cybersecurity, MIS or related degree and five (5) years of relevant experience in IT risk or IT auditing, or combination of education, training and experience.
Effective in managing, influencing and negotiating with senior stakeholders within IT, Internal Audit, and Regulators.
Experience with regulatory exams and audits (FINRA, FRB, OCC, SEC, etc.) is a strong plus.
Experience in enterprise risk management concepts and risk assessments.
Experience within a highly regulated environment like Financial Services required.
Advanced knowledge of the following:
IT controls and risks sufficient to identify and evaluate control effectiveness and identify gaps between risks and controls.
Recognized IT control frameworks and standards (e.g., COBIT, ITIL, and ISO 17799).
Technical skills and proficiency in a wide array of platforms, systems, and concepts (e.g., Windows, UNIX, SQL, Tandem, AWS, SSO, AD, WAF, API security).
May occasionally work a non-standard shift including nights and/or weekends and/or have on-call responsibilities.

Licenses/Certifications:
Industry leading certifications such as Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), Certified Risk Information Systems Control (CRISC), Security+, and any AWS Associate or Professional level certification highly preferred.

Keywords: Raymond James, St. Petersburg , Senior IT Security TRA Analyst, Professions , Saint Petersburg, Florida

Click here to apply!

Didn't find what you're looking for? Search again!

I'm looking for
in category
within


Log In or Create An Account

Get the latest Florida jobs by following @recnetFL on Twitter!

St. Petersburg RSS job feeds