Cyber Security Expert

JOB DESCRIPTION
We are seeking a highly skilled and experienced Cyber Security Expert to safeguard our trading organization's critical infrastructure and sensitive financial data. The ideal candidate will possess a deep understanding of cybersecurity principles, threat landscapes, and emerging technologies, with a specific focus on the unique challenges and regulations within the trading industry.

Company Brief Description:
Platform for matching prop firms with traders, and at any given time giving you insight into the best deals on the market. In addition to this the company is building out tools for traders using the platform when choosing the right prop firm.

Responsibilities:
Threat Assessment and Risk Management:
- Conduct regular security assessments and vulnerability scans to identify potential threats and weaknesses, particularly those targeting the trading industry.
- Develop and implement comprehensive security policies, standards, and procedures aligned with industry best practices and regulatory requirements.
- Analyze security incidents and breaches to determine root causes and implement corrective actions, minimizing financial and reputational impact.
- Stay informed about the latest cyber threats and trends, including those specifically targeting financial institutions and trading firms.

Network and System Security:
- Secure network infrastructure, including firewalls, intrusion detection systems, and VPNs, to protect against unauthorized access and data breaches.
- Monitor network traffic for anomalies and potential attacks, with a focus on identifying and mitigating threats related to trading activities.
- Implement robust access controls and identity management solutions to safeguard sensitive trading systems and data.
- Harden system configurations to minimize vulnerabilities and protect against advanced persistent threats (APTs) targeting the financial sector.
- Secure Google Workspace environment: Implement and maintain security measures for Google Workspace applications (Gmail, Drive, Docs, etc.), including data loss prevention (DLP), encryption, and secure access controls.

Data Protection and Privacy:
- Protect sensitive financial data, including customer information, trade data, and proprietary algorithms, through encryption, data loss prevention, and other security measures.
- Ensure compliance with data privacy regulations (e.g., GDPR, CCPA) and industry-specific regulations (e.g., MiFID II, Dodd-Frank).
- Conduct regular data security audits and certifications to maintain compliance and mitigate risks.

Incident Response and Recovery:
- Develop and maintain an incident response plan tailored to the specific needs of the trading industry.
- Respond to security incidents promptly and effectively, minimizing disruption to trading operations.
- Coordinate with relevant teams, including IT, risk management, and legal, to contain the incident, restore systems, and mitigate financial losses.

Security Awareness and Training:
- Educate employees on cybersecurity best practices and potential threats, with a focus on the unique risks faced by trading professionals and the secure use of Google Workspace and Slack.
- Conduct regular security awareness training sessions to reinforce security awareness and promote a culture of security.
- Collaborate with compliance and risk management teams to ensure that security awareness programs align with regulatory requirements.

Requirements:
- Bachelor's degree in Computer Science, Information Security, or a related field.
- Advanced certifications (e.g., CISSP, CISM, CISA) preferred, with a focus on certifications relevant to the financial industry.
- Strong understanding of cybersecurity frameworks (e.g., NIST Cybersecurity Framework, ISO 27001) and their application to the trading industry.
- Proven experience in network security, system security, and data protection, with a focus on securing trading platforms, market data feeds, and other critical systems.
- Proficiency in security tools and technologies (e.g., SIEM, EDR, firewalls, intrusion detection systems) commonly used in the financial industry.
- In-depth knowledge of Google Workspace security features and best practices.
- Experience with securing Slack environments, including channel and user management, data loss prevention, and third-party integrations.
- Excellent problem-solving and analytical skills, with the ability to quickly identify and respond to security threats.
- Strong communication and interpersonal skills, with the ability to effectively communicate technical information to both technical and non-technical audiences.
- Ability to work independently and as part of a team, often under pressure and tight deadlines.
- In-depth knowledge of industry-specific regulations and standards, such as MiFID II, Dodd-Frank, and Basel III.

Preferred Skills:
- Experience with other IT infrastructures (e.g., AWS, Azure, on-premises servers)

*** EMAIL YOUR RESUME TO rosemary@fronted.com ***
*** EMAIL SUBJECT: CSE - First & Last Name ***

Salary:
Up to $1,500 per month, based on experience and qualifications.