Security Engineer

• The Principal Lead - Information Security is a high visibility role that is responsible for driving the Privileged Account Management [PAM] Governance and plays a crucial role in Cloud Governance initiatives [e.g. securing AWS Secrets Manager or Azure Key Vault].
• This role will participate in on-going operational activities that serve to establish appropriate access to and provide the appropriate protection, confidentiality, integrity and availability of enterprise systems and data through effective security controls.
• This role is also responsible for validating compliance with policies and standards that keep applications and infrastructure safe and secure from vulnerabilities.
• Provide timely and effective operational support for the firm's information security tools, processes and practices in the Identity space.
• Use standard technology monitoring tools to monitor assigned environments and/or technical assets and identify/detect behavior outside of established standards.
• Escalate key security issues to the appropriate team to be addressed.
• Assist with security assurance testing activities.
• Monitor compliance with information security and identity policies and practices and any applicable laws.
• Assist with internal and external security risk assessments, risk analysis and application or system-level access reviews and attestations.
• Coordinate/facilitate access and entitlement reviews for individual applications, business lines, and the enterprise at-large.
• Assist with the research, development, continuous improvement and implementation of identity policies, procedures, standards, and processes based on compliance requirements and industry best practices.
• Document the identity governance requirements, processes and procedures.
• Enforce information security and identity policies and procedures by reviewing violation reports, investigating possible exceptions, and documenting controls.
• Prepare status reports on identity and access matters that are used for a variety of purposes - tracking and monitoring security breaches, forensic investigative activities, remediation plan management and risk management & compliance reporting.
• Effectively manage and prioritize ad-hoc reporting requests, scorecards, and standard departmental reporting.
• Coordinate with internal team and external auditors to provide documentation of compliance assessments, support, and remediation activities.
• Maintain and develop knowledge of identity & access management trends, new identity technologies and best practices.
• Conduct security and industry specific research to keep self and the firm abreast of the latest security issues and regulatory developments that may impact existing policies, procedures and practices.
• Participate in information security education, training and awareness activities for technology and business teams.

Principal Lead – Information Security

Senior Manager – Risk and Compliance – Cyber Security