Junior Security Analyst

Junior Security Analyst

Position Overview

NetRoadshow is seeking a detail-oriented and highly organized Junior Information Security Analyst to support the company’s security operations, compliance initiatives, and client assurance program.

The role is ideal for an early-career cybersecurity professional who is process-driven, structured, and capable of managing documentation-heavy workflows in a highly compliance-driven financial services environment. This is a great opportunity for someone trying to break into the Information Security field to learn in a thriving organization.

The primary focus of this role will include:

• Completing and managing client security questionnaires and audits.
• Tracking and coordinating long-term security and compliance initiatives
• Supporting enterprise-wide security governance efforts
• Assisting in maintaining security controls aligned to financial industry expectations
• Assisting in SOC 2 audit preparation

Key Responsibilities:

1. Security Questionnaire & Client Assurance Management (Primary Function)

• Complete client and bank security questionnaires accurately and within deadlines.
• Maintain a centralized repository of approved responses and supporting documentation.
• Coordinate with Engineering, DevOps, Legal, Security, and Production teams to gather evidence.
• Track version history and control narrative consistency across responses.
• Identify gaps between current controls and requested controls.
• Escalate material findings or high-risk exposure areas to senior security leadership.
• Maintain mapping between questionnaire responses and internal control frameworks.

2. Security Governance & Long-Term Initiative Tracking

• Maintain and update the security roadmap.
• Track remediation items from:
  • Internal audits
  • Client assessments
  • Penetration tests
  • Vendor assessments
  • Policy reviews
• Provide weekly status updates to security leadership.
• Maintain risk register and issue tracking documentation.
• Assist in preparation of board- or executive-level security reporting.

The analyst will serve as the operational backbone ensuring that security projects move forward and are documented properly.

3. Policy & Control Maintenance

• Assist with drafting and maintaining security policies and procedures.
• Map policies to relevant frameworks (SOC 2, ISO 27001, NIST CSF, CIS Controls).
• Ensure documentation reflects actual technical implementation.
• Track annual review cycles and attestation processes.
• Support evidence collection for audits and certifications.

4. Cross-Functional Security Support

• Work with Engineering to ensure secure SDLC documentation is maintained.
• Assist with tracking security requirements in the CI/CD pipeline.
• Support third-party vendor security reviews.
• Participate in internal security awareness initiatives.
• Help ensure protection of:
  • MNPI (Material Non-Public Information)
  • PII
  • Confidential issuer and investor data

5. Security Operations Support (Exposure & Growth Area)

• Monitor and triage low-level security alerts (as assigned).
• Support documentation of incident response events.
• Assist in tabletop exercises.
• Help maintain access review records.
• Track remediation for vulnerability scans.

Required Qualifications:

• Bachelor’s degree in Cybersecurity, Information Systems, or related field (or equivalent experience)
• 0-3 years of experience in information security, IT audit, compliance, or risk management
• Strong written communication skills
• Strong organizational skills with ability to manage multiple parallel initiatives
• Self-driven, autonomous and can contribute to the strategy and roadmap of the team. Ability to handle proprietary and sensitive information in a confidential manner

Preferred Skills and Proficiencies:

• Experience in fintech, financial services and capital markets
• Familiarity with secure software development lifecycle (SDLC)
• Understanding of vendor risk management, risk registers, data classification frameworks

Core Competencies

• Process-oriented and structured
• Strong documentation discipline
• Professional client-facing communication
• Ability to handle confidential information with discretion
• Analytical thinker with attention to detail
• Self-starter who takes ownership of assigned initiatives

Performance Metrics

Success in this role will be measured by:

• On-time completion rate of security questionnaires
• Reduction in duplicate or inconsistent response content
• Improved tracking visibility of security initiatives
• Successful audit support
• Reduction in remediation backlog
• Positive internal and external stakeholder feedback