Security Analyst II, IS (Audit)

Job Title
Security Analyst II, IS (Audit)

Opportunity Overview
What IS Cyber Risk Management does…

The IS Cyber Risk Management Team is responsible for establishing and maintaining Edward Jones overall IS risk management program, which is designed to ensure that the company’s IS systems and information assets are adequately protected. The individual in this position is responsible for identifying, evaluating and reporting on information security risks in a manner that meets Edward Jones regulatory and other compliance requirements. The IS Cyber Risk Management Team Leader works proactively with IS and business leaders to implement practices that meet Edward Jones defined policies and standards for information risk management

What you'll do...

• Establish, maintain and review security controls and processes to assist management in the protection of information system resources and associated assets against accidental or unauthorized modification, destruction or disclosure
• Ensure compliance to published Information Security policies and standards
• Provide security services that align with business objectives and regulatory requirements
• Audit of information systems with respect to third party assessments of security controls;
• Evaluate existing systems to ensure compliance with standards and policies
• Develop critical security measures and controls for leadership review
• Investigate, document and escalate security issues to the appropriate individuals
• Create and maintain documentation for security control mechanisms and processes
• Provide security input into low to medium complexity development efforts
• Manag and develop self while internalizing leadership feedback

• Problem Solving
  • Strong analytical skills are necessary to research security issues and recommend potential solutions for leadership review.
• Decision Making
  • Processes provide significant procedure and guidance, but cannot cover every possible situation so the individual must be able to apply judgment within the scope of the processes
  • Individuals are expected to perform most daily tasks autonomously based on a framework of documented policies and procedures, and are individually responsible for the accuracy and timeliness of their work
  • Critical decisions require coordination and leadership review prior to implementation
• Span of Influence
  • Decisions may be required that are critical in nature, leadership review is generally required prior to execution
  • Impacts may be widely visible and have operational impact (e.g., system outage/access issues), but short in duration.
  • After leader review, results of work may be communicated directly to, or be visible by, firm leadership
  • Actions taken could affect Helpdesk call volume, and/or target dates relating to projects or enhancements

Req ID
42783BR

Position Type
Home Office

Full-time/Part-time
Full-Time

EEO Statement
Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law.

Posting Location
Missouri, St. Louis

Company Description
At Edward Jones, we help clients achieve their serious, long-term financial goals by understanding their needs and implementing tailored solutions. To ensure a personal client experience, we have located our 14,000+ branch offices where our more than 7 million clients live and work.

A typical branch office has one financial advisor who meets with clients face-to-face and one branch office administrator who enhances the team's ability to build deep relationships with clients. Headquarters associates in St. Louis and Tempe provide support and expertise to help U.S. and Canada branch teams deliver an ideal client experience. Edward Jones currently has more branch offices than any other financial services firm, and we continue to grow to meet the needs of long-term individual investors.

Home based Associate?
No

Awards and Accolades

• For the 19th year, Edward Jones was named one of the “100 Best Companies to Work For®” by FORTUNE magazine in its annual listing. The firm ranked No. 5 overall. These 19 FORTUNE rankings include top 10 finishes for 15 years, top 5 rankings for eight years and consecutive No. 1 rankings in 2002 and 2003.

From FORTUNE Magazine, February 15, 2018 © 2018 Time Inc. Used under license. FORTUNE and Time Inc. are not affiliated with and do not endorse products or services of Edward Jones.

Search Headquarters Positions by Area of Interest
Information Systems

Position Requirements

What you'll need… Bachelor's degree in Information Technology, Telecommunications or Engineering preferred or equivalent related work experience. Minimum of 3 years Information Systems Security experience or 5 years of Information Technology experience with a focus on security controls and processes Functional Skills Required understanding of risk management methods. Knowledge of the NIST Cyber Security Framework and policies designed to implement and assess controls following NIST guidance; Process oriented; skilled in establishing and executing plans. Excellent interpersonal skills; develops relationships; seen as credible and trustworthy. Must be able to effectively communicate to businesses, vendors, associates, and leaders