Associate, Information Security

Join a team that values your ambition and empowers your growth

At Corient, we help high- and ultra-high-net-worth individuals and families to enjoy a full life, while enabling them to preserve their wealth for future generations, and provide for the people, causes and communities they care about. We focus on exceeding expectations, simplifying lives, and establishing legacies that last for generations. We are always looking for talented and motivated individuals to join our team. If you want to work for a company that values your contributions and supports your growth, we would like to meet you.

The Cybersecurity Associate is responsible for assisting with the day-to-day operations of securing the firm's various information systems. Reporting to the Head of Cybersecurity Operations, this role is tasked with providing technical expertise in all areas of network, system, and application security. This role works closely with the various teams in the Information Technology department to ensure that systems and networks are always designed, developed, deployed, and managed with an emphasis on strong, effective cybersecurity and risk management controls.

The role will partner with other members of the cybersecurity operations team to drive ongoing efficiency and effectiveness of cybersecurity tooling, including but not limited to the following topics and affiliated technologies:
- Email security
- Endpoint security
- Vulnerability management (VM)
- Data loss prevention (DLP)
- Cloud security
- Network security
- Identity and Access Management (IAM)
- Security Information and Event Management (SIEM)
- Security Orchestration and Automated Response (SOAR)
- Data Forensics and Incident Response (DFIR)

The role will also have extensive engagement with vendors supporting and enabling the Corient Cybersecurity program, such as Rapid 7, Microsoft, and Cisco Meraki.

This position will work closely with the broader Technology team and key business stakeholders across all departments to support a comprehensive security program. This includes ensuring compliance with defined security policies, processes, and standards. As a member of the Security team, the Security Engineer will elevate the Security program by utilizing "secure-by-design", "defense-in-depth", and "least-privilege" practices in support of cybersecurity best practices, industry standards, frameworks, regulations, policies, and procedures.

The ideal candidate will have a proven track record of career growth, passion to deliver results, excellent problem-solving skills, strong oral and written communication skills, and the desire to be challenged and grow.

Responsibilities

• Security Tooling Operation: Operation and optimization of security tools, including but not limited to Azure Security (DLP, Compliance), Microsoft Defender (Endpoint, Cloud, Email), Rapid 7 (Vulnerability Management, SIEM) and Cisco Umbrella solutions. Evaluate, analyze, and deploy security technologies to enhance the organization's overall security posture.
• Incident Response and Threat Mitigation: Lead and participate in incident response activities, investigating security incidents and implementing corrective actions. Collaborate with teams to develop and implement proactive measures to mitigate potential security threats.
• Scripting and Automation: Develop and maintain scripts to automate security processes and tasks. Integrate security solutions into existing workflows for improved efficiency.
• Vulnerability Management and Attack Surface Reduction: operate vulnerability management program and coordinate vulnerability remediation efforts with respective technology teams.
• Emerging Threats: leverage public and proprietary threat intelligence feeds to identify new and emerging threats that we must prepare to defend against.

Qualifications & Requirements

• A four-year college degree or equivalent industry training and certifications (e.g., CEH, CISM, CompTIA Security+, CISSP, GSEC)
• Three to six years of experience in a security analyst or related position; preferably within the financial services industry.
• Strong understanding of Microsoft's enterprise technology platform, including Azure, Active Directory, SQL, Office365, and the Windows server and desktop operating systems.
• Familiarity with industry frameworks, such as NIST, CIS-18 and ISO.
• Demonstrated expertise in managing security tools (SIEM, DLP, SOAR, IAM, EndPoint, IDPS).
• In-depth experience administering vulnerability management solutions such as Nessus, Qualys, Rapid7, or similar.
• Strong analytical and critical thinking skills and the ability to organize work in a logical, thorough, and succinct manner.
• Strong scripting and automation skills (Python, PowerShell, etc.).
• Highly self-motivated, results-orientated, and self-directed to handle multiple ongoing tasks.
• Flexibility to adapt to changing assignments and ability to effectively prioritize.
• Effective written and verbal English communication at all levels.
• Demonstrated ability to operate and innovate in a small team with a fast-paced environment, balancing both strategic and tactical needs.

This position description is intended to provide a general overview of the expectations and responsibilities of this position and may not include all tasks that may be assigned. As the nature of business demands change, so may the functions of this position. Additional duties and responsibilities may be assigned with or without notice.

Pay Information

This position is exempt and is paid according to the laws of the State of Illinois or Florida. The pay range for this position is $100,000-$125,000 USD per year. We are required to provide a reasonable estimate of the compensation range for this role. This range takes into account the wide range of factors that are considered in making compensation decisions including but not limited to experience, skills, knowledge, abilities, education, licensure and certifications, and other business and organizational needs. It is not typical for an individual to be offered a salary at or near the top of the range for a position. Salary offers are determined based on final candidate qualifications and experience.

Physical Requirements

• This position requires the physical capabilities to work in an office environment, which may include prolonged periods of sitting at a desk and working on a computer. Corient seeks to make reasonable accommodations that enable individuals with disabilities to perform essential duties when possible.
• This position may require the ability to lift up to 15 pounds.
• This position is required to work onsite 4 days per week.

U.S. Eligibility Requirements

• Must be 18 years of age or older.
• Must be willing to submit to a background investigation; any offer of employment is conditioned upon the successful completion of a background investigation.
• Must have unrestricted work authorization to work in the United States. For U.S. employment opportunities, Corient hires U.S. citizens or permanent residents. Exceptions to these requirements will be determined based on shortage of qualified candidates with a particular skill. Corient will require proof of work authorization.
• Corient participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. If E-Verify cannot confirm that you are authorized to work, this employer is required to give you written instructions and an opportunity to contact Department of Homeland Security (DHS) or Social Security Administration (SSA) so you can begin to resolve the issue before the employer can take any action against you, including terminating your employment. Employers can only use E-Verify once you have accepted a job offer and completed the Form I-9.
• Must be willing to execute Corient's Employee Agreement or Confidentiality and Non-Disclosure Agreement, which require, among other things, post-employment obligations relating to non-solicitation, confidentiality, and non-disclosure.

What You Can Expect from Us

Our dedication to the Employee Experience at Corient is aimed at supporting, empowering, and inspiring our talented team through:

• 401(k) Plan with Employer Matching
• Four Medical Plan options that is generously subsidized by Corient
• Employer paid Dental, Vision & Life and AD&D Insurance
• Employer paid Short-term & Long-term Disability
• Paid Maternity & Parental Leave
• Flexible Spending Accounts & Health Savings Accounts
• Dependent Care FSA
• Commuter & Transit FSA
• Corporate Discount Program - Perkspot
• Training Reimbursement
• Paid Professional Designations
• Giving back to the community - Volunteer days

Corient is an integrated national U.S. wealth management firm providing comprehensive solutions to ultra-high-net-worth and high-net-worth clients. We combine the personal service, creativity and objective advice of a boutique with the power of an exclusive network of experienced advisors, capabilities and solutions to create a profoundly different wealth experience. As fiduciaries, we put our clients at the center of everything we do. We focus on exceeding expectations, simplifying lives and establishing lasting legacies.

Full participation of all employees in a safe, healthy and respectful environment is key to individual and company success. We are committed to fully utilizing the abilities of all our employees and expect each of our employees to honor this commitment in their daily responsibilities.

We are an equal opportunity employer. All candidates will be recruited and, if applicable, selected and employed without regard to sex, race, religion, marital status, veteran status, age, national origin, sexual orientation, gender identity, color, creed, ancestry, disability, genetic information or any other basis prohibited by law.