Security and Risk Analyst

2 months ago


Chicago, United States Taft Stettinius & Hollister LLP Full time
Taft is seeking a Security and Risk Analyst to support our Information Technology team in our Chicago, Cincinnati, Cleveland, Columbus, Dayton, Detroit, Indianapolis or Minneapolis office.

Job Summary:

The Security and Risk Analyst is responsible for ensuring Taft's digital assets and those of our clients are protected from unauthorized access through a multi-discipline approach, actively identifying and mitigating suspicious activity while evaluating and updating policy and conducting and analyzing security assessments at the direction of the Security and Risk Manager.

Duties/Responsibilities:

  • Responds to security alerts, indications of compromise and helpdesk security incident tickets in real time, gathering information and taking action to protect the firm and communicating findings.
  • Assists the Security and Risk Manager in performing and analyzing the results of internal and external security audits, security assessments, vulnerability testing and risk analysis.
  • Assists the Security and Risk Manager in developing and deploying end user training programs and working with users on compliance.
  • Assist IT and teams in verifying the security of third-party vendors, collaborating with them to meet security requirements.
  • Monitoring security access, vendor access, remote access, and anomalies.
  • Supports periodic reviews by internal audit, compliance teams and other risk-related functions as required.
  • Adhere to all IT Department standards and Firm Information Security Policies, including but not limited to change control and maintenance windows.
  • Adhere to IT ITIL (Information Technology Infrastructure Library) disciplines and processes, including, but not limited to: ITSM (IT Service Management); Incident Management; Change Management and Problem Management.
  • Obtains, maintains, and applies knowledge of relevant areas (attends seminars; reads periodicals; participates in outside organizations).
  • Works with the firm's MSSP to ensure network is secure.
  • Monitors network for security related issues including, but not limited to, abnormal access attempts, suspected malware, and possible breaches and ANY potential weaknesses.
  • Works with helpdesk to identify and resolve possible security events and incidents, providing timely and relevant in-house escalation support, adhering to ticketing procedures and SLA requirements.
  • Researches new software applications intended to make the Firms' system more secure.
  • Drafts documentation as requested for security related policies and procedures
  • Assists training team with preparing relevant security training plans and materials and assessing their adoption rate and effectiveness.

Knowledge, Abilities, Skills, Other Requirements

  • Proficiency and understanding of current cyber security technologies encompassing perimeter/edge next generation security, endpoint security, heuristic security, and security related monitoring.
  • Ability to be available after hours and remotely to respond to threat alerts and possible attacks.
  • Ability to write reports, knowledge base articles and short procedures
  • Clear thinking in a crisis or stressful situation.
  • Travel is not required on a regular basis, although some out-of-the-area and overnight travel may be expected.
  • Background in Cybersecurity principles and best practices.
  • Proficiency in Windows operating systems as it pertains to security threats.
  • Proficiency in Firewalls, application monitoring, securing the network perimeter.
  • Demonstrates teamwork (is receptive to and acts upon input from others, is willing and able to compromise as needed, displays willingness to work with all Firm employees, willingly assists others).
  • Demonstrates initiative (contributes new ideas, is self-motivated).
  • Demonstrates organizational skills and effective use of time (ability to plan, set priorities and manage time to ensure work is timely and efficiently completed per department plan and budget parameters).
  • Demonstrates flexibility (willing to adjust to changes, able to work with all levels of Firm employees).
  • Exhibits dependability (maintains presence in all office locations as appropriate).
  • Adheres to strict confidentiality standards (keeps confidential all information concerning firm matters and clients).

Education and Experience:

  • Bachelor's degree or equivalent work experience.
  • Three plus years Cybersecurity-related work experience.
  • Security or Microsoft certifications desired.
  • Familiarity with helpdesk ticketing systems such as Service Desk Plus or ServiceNow.
  • Law firm experience preferred.

Candidates interested in the Chicago office should apply here.

Candidates interested in the Cincinnati office should apply here.

Candidates interested in the Cleveland office should apply here.

Candidates interested in the Columbus office should apply here.

Candidates interested in the Dayton office should apply here.

Candidates interested in the Detroit office should apply here.

Candidates interested in the Indianapolis office should apply here.

Candidates interested in the Minneapolis office should apply here.

Taft is a State of Minnesota and City of St. Paul Affirmative Action Employer as required in those jurisdictions. Taft is an Equal Opportunity Employer. The information in this posting presents general duties, tasks, and responsibilities but is not intended to be an exhaustive listing.Taft Stettinius & Hollister LLP participates in E-VERIFY.

  • Chicago, United States Senior Analyst, Alpha Analytics and Portfolio Risk Full time

    Seeking to hire a Senior Analyst, Alpha Analytics and Portfolio Risk, for a direct hire opportunity in Chicagofor one of the nation's largest independent foundations. Organizations supported by the Foundation work in about fifty countries.The Analyst is responsible for monitoring and reporting on risk and return factors impacting the Foundation’s...


  • Chicago, Illinois, United States InRule Technology, Inc. Full time

    Senior Security GRC Analyst at InRule Technology, Inc.InRule Technology, a prominent innovator in delivering cutting-edge solutions for diverse industries globally, is seeking a dedicated Senior Security GRC Analyst. This role is essential in advancing our sophisticated AI Decisioning platform, which seamlessly combines declarative logic, non-declarative...


  • Chicago, Illinois, United States The AZEK Company Full time

    Senior Analyst, Cyber Security Governance, Risk & ComplianceCompany OverviewThe AZEK Company is a premier manufacturer of cutting-edge, sustainable building materials, committed to transforming the utilization of recycled resources. Our pursuit of excellence propels us to design high-quality solutions for both residential and commercial sectors,...


  • Chicago, Illinois, United States The AZEK Company Full time

    Senior Analyst, Cyber Security Governance, Risk & ComplianceCompany OverviewThe AZEK Company stands at the forefront of sustainable building product manufacturing, committed to innovating with recycled materials. Our dedication to quality drives us to create superior residential and commercial solutions that are transforming the industry.We pride ourselves...

  • Credit Risk Analyst

    6 days ago


    Chicago, Illinois, United States Chicago Mercantile Exchange Inc. Full time

    The Credit Risk Analyst will be tasked with identifying, assessing, quantifying, and overseeing significant credit risks associated with CME's counterparties and securities clearing exposures. The core duties of the Analyst include evaluating credit risks tied to counterparties and exposures while formulating essential risk methodologies and processes...

  • Credit Risk Analyst

    6 days ago


    Chicago, Illinois, United States Chicago Mercantile Exchange Inc. Full time

    The Credit Risk Analyst will play a crucial role in identifying, assessing, and monitoring significant credit risks associated with CME's counterparties and securities clearing exposures. The primary duties of the Analyst include evaluating credit risks linked to counterparties and exposures while developing essential methodologies and processes for...


  • Chicago, Illinois, United States Chicago Mercantile Exchange Inc. Full time

    The Credit Risk Analyst will be tasked with identifying, assessing, quantifying, and overseeing significant credit risks associated with CME's counterparties and securities clearing exposures. The core duties of the Analyst involve evaluating credit risks linked to counterparties and exposures while developing essential risk methodologies and processes...


  • Chicago, Illinois, United States Vantage Risk Companies Full time

    Position Overview:The Senior Analyst in Enterprise Risk Management will be instrumental in enhancing risk reporting and advancing the ERM function within Vantage Risk Companies.Key Responsibilities:1. **Data Collection and Reporting:** - Gather and monitor essential aggregation risk metrics across various risk portfolios and products. - Present findings...


  • Chicago, United States McDonald's Corporation Full time

    McDonalds is seeking a Senior Risk Analyst to support our cybersecurity team as we protect our global brand. You will collaborate closely with cybersecurity experts, Global Technology teams, suppliers, and business leaders to assess technology risk Risk Analyst, Cybersecurity, Risk, Security, Analyst, Technology, Restaurant


  • Chicago, United States The AZEK Company Full time

    Sr. Analyst, Cyber Security Governance, Risk & ComplianceThe AZEK Company Location Chicago, IL; Wilmington, OH or Scranton, PA.The AZEK Company () is a $1.2+ billion, and growing, industry-leading manufacturer of beautiful, low-maintenance building products, and is highly committed to accelerating the use of recycled materials. We use our expertise in...


  • Chicago, United States The AZEK Company Full time

    Sr. Analyst, Cyber Security Governance, Risk & ComplianceThe AZEK Company Location Chicago, IL; Wilmington, OH or Scranton, PA.The AZEK Company (www.azekco.com) is a $1.2+ billion, and growing, industry-leading manufacturer of beautiful, low-maintenance building products, and is highly committed to accelerating the use of recycled materials. We use our...

  • Senior Risk Analyst

    2 weeks ago


    Chicago, United States McDonald's Corporation Full time

    McDonald’s new growth strategy, Accelerating the Arches, encompasses all aspects of our business as the leading global omnichannel restaurant brand. As the consumer landscape shifts, we are using our competitive advantages to further strengthen our brand. One of our core growth strategies is to Double Down on the 3Ds (Delivery, Digital, and Drive Thru)....


  • Chicago, United States Vantage Risk Companies Full time

    Chicago, 123 N Wacker Dr, Chicago, Illinois, United States of America Req #138 Thursday, July 25, 2024 About the Company Vantage Group Holdings Ltd. (Vantage) was established in late 2020 as a re/insurance partner designed for the future. Driven by relentless curiosity, our team of trusted experts provides a fresh perspective on our clients’ risks. We add...


  • Chicago, United States McDonald's Full time

    McDonald's evolving Accelerating the Arches growth strategy puts our customers and people first and demonstrates our competitive advantages to strengthen our brand. We are recognized on lists like Fortune’s Most Admired Companies and Fast Company’s Most Innovative Companies.Doubling Down on the 4Ds (Delivery, Digital, Drive Thru, and Development)Our...

  • Senior Risk Analyst

    2 weeks ago


    Chicago, United States McDonald's Full time

    McDonald’s new growth strategy, Accelerating the Arches, encompasses all aspects of our business as the leading global omnichannel restaurant brand. As the consumer landscape shifts, we are using our competitive advantages to further strengthen our brand. One of our core growth strategies is to Double Down on the 3Ds (Delivery, Digital, and Drive Thru)....


  • Chicago, United States McDonald's Full time

    McDonald's evolving Accelerating the Arches growth strategy puts our customers and people first and demonstrates our competitive advantages to strengthen our brand. We are recognized on lists like Fortune’s Most Admired Companies and Fast Company’s Most Innovative Companies.Doubling Down on the 4Ds (Delivery, Digital, Drive Thru, and Development)Our...

  • Senior Risk Analyst

    2 weeks ago


    Chicago, United States McDonald's Corporation Full time

    Company Description McDonald's new growth strategy, Accelerating the Arches, encompasses all aspects of our business as the leading global omnichannel restaurant brand. As the consumer landscape shifts, we are using our competitive advantages to further strengthen our brand. One of our core growth strategies is to Double Down on the 3Ds (Delivery, Digital,...

  • Governance, Risk

    3 months ago


    Chicago, United States Harrison Gray Search and Consulting LLC Full time

    Harrison Gray Search has partnered with a unique investment management firm to find the next member of their Governance, Risk, and Compliance team in Chicago. The Governance, Risk & Compliance Analyst is responsible for identifying and mitigating risks across the department. These risks may include operational, regulatory, and compliance risks. The...

  • Market Risk Analyst

    6 days ago


    Chicago, Illinois, United States Phaxis Full time

    Phaxis is seeking a dedicated professional to join our expanding Market Risk team. The ideal candidate will take on the role of Market Risk Analyst, focusing on the evaluation of risk exposure across various financial products. This position involves a critical analysis of accounts to ensure effective intraday risk management.Key Responsibilities:Conduct...

  • Financial Risk Analyst

    2 months ago


    Chicago, United States MindSpring Partners LLC Full time

    Our client, an asset manager in Chicago, is looking to add an Analyst to their Governance and Risk team.ResponsibilitiesReview AML related reports and dashboard dataComplete workflows that relate to new shareholders, Suspicious Activity, and other generated reports pertaining to departmental risksPrepare Suspicious Activity Reports (SARs) and participate in...