IT Security Analyst

About ACA :

ACA Group is the leading governance, risk, and compliance (GRC) advisor in financial services. We empower our clients to reimagine GRC and protect and grow their business. Our innovative approach integrates consulting, managed services, and our ComplianceAlpha® technology platform with the specialized expertise of former regulators and practitioners and our deep understanding of the global regulatory landscape.

Position Summary :

The IT Security Analyst is responsible for the daily reviews of logging and monitoring systems utilized by ACA Group ('ACA'). This position triages security events as they come in through automated alerts and other dashboards, resolving routine issues based on defined playbooks and escalating higher severity issues. This position needs to understand the IT vision and work towards realizing it. This position is responsible for finding ways to apply departmental new ideas into their daily work. This position needs a self-starter who works to improve their own effectiveness as well as provides ad-hoc suggestions for broader improvements for our IT Security systems, specifically as it relates to the effectiveness of monitoring and alerting. Execution of assigned tasks on time and on quality with oversight and assistance from others.

Job Duties :

• Review security alerts in real time to triage and address or escalate.
• Review and analyze security logs, reports, and dashboards to identify trends, vulnerabilities, and areas for improvement.
• Analyze security events and incidents to identify potential threats or suspicious activities.
• Investigate security incidents and anomalies, including conducting root cause analysis and recommending remediation actions.
• Investigate staff-reported potential security incidents, including malicious machine activity and malicious emails or other impersonation events.
• Participate in vulnerability scanning and assessment activities, including identifying and prioritizing vulnerabilities for remediation.
• Assist in vulnerability remediation efforts, including research into remediation solutions.
• Participate in Due Diligence Requests and other audit activities to collect and produce evidence.
• Participate in Incident Response tabletop exercises.
• Assist with the containment and / or mitigation of any discovered security incidents.
• Assist with Identifying gaps, vulnerabilities, exploits, and patches in IT controls in order to generate issue lists and mitigation recommendations.
• Assist with maintenance of IT Security Systems.
• Assist with research of the latest security technologies.
• Assist with conducting technical reviews of ACA's IT systems and audit security controls.
• Assist with the research, review, development, and / or enhancement of IT security systems.
• Handle security related escalations from 1st / 2nd line support staff.
• Perform ad-hoc work / special projects as necessary to support ACA on various client and internal initiatives.

Preferred Education And Experience

Required Skills And Attributes

What working at ACA offers :

We offer a competitive compensation package where you'll be rewarded based on your performance and recognized for the value you bring to our business. Our Total Rewards package includes medical coverage fully funded by ACA for employees and their family as well as access to Maternity & Fertility and Wellness programs. ACA also provides Personal Accident Insurance, Group Term Life Insurance, Employee Discount programs and Employee Resource Groups. You'll be granted time off for designated ACA Paid Holidays, Privilege Leave, Casual / Sick Leave, and other leaves of absence to support your physical, financial and emotional well-being.

What we commit to :

ACA is firmly committed to a policy of nondiscrimination, which applies to recruiting, hiring, placement, promotions, training, discipline, terminations, layoffs, transfers, leaves of absence, compensation and all other terms and conditions of employment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected status.

Skills Required

Root Cause Analysis, Vulnerability Scanning, Active Directory, Azure, Incident Response, Aws