Security Program Analyst

We are seeking a motivated and detail-oriented Cybersecurity Analyst to join our growing cybersecurity function. This individual will play a critical role in enhancing ICONIQ’s security program within a lean but high-impact team. You’ll work across multiple key domains including threat monitoring, vendor security reviews, incident response, and security awareness directly contributing to the resilience and maturity of our cybersecurity program.

What You’ll Do:

• Vendor Security & Risk Management:
  • Perform detailed security due diligence reviews on third-party vendors annually.
  • Manage and enhance the vendor evaluation workflow, including updating Due Diligence Questionnaires and tracking systems.
• Security Operations:
  • Monitor and triage daily security alerts and threat intelligence feeds.
  • Participate in vulnerability management activities, including scanning, assessment, and remediation coordination.
  • Support timely incident detection, response, and documentation across the organization.
• Cybersecurity Awareness & Training:
  • Assist with designing and deploying phishing simulations and measure effectiveness.
  • Evaluate and improve security awareness training content and delivery.
  • Compile and share reports to help foster a cyber-aware culture across the firm.
• Policy & Documentation:
  • Maintain and update cybersecurity documentation, including incident reports, standard operating procedures, and compliance records.
  • Assist in preparing materials for audits and regulatory compliance as needed.
• Security Projects & Continuous Improvement

Ideal Candidate Background:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• 1+ years of relevant experience (internships or full-time) in cybersecurity, information security, or a related field.
• Strong understanding of cybersecurity principles, including risk assessment, vulnerability management, and threat mitigation.
• Familiarity with common security tools (e.g., vulnerability scanners, phishing platforms, SIEM tools).
• Strong analytical and critical thinking skills with a proactive problem-solving mindset.
• Excellent written and verbal communication skills, with a keen attention to detail.
• Experience with scripting languages (Python, Bash) for automation or analysis is a plus.

What We Offer:

• Comprehensive Medical, Dental and Vision Insurance.
• Life and disability insurance coverage as well as family and wellness benefits including mental health benefits, fertility benefits, and back-up childcare.
• A matching 401(k) program.
• Commuter Benefits program.
• Stipends to support wellness and hybrid working arrangements.
• We support employees who wish to pursue professional designations/certifications and offer tuition reimbursement in addition to an allocation for books and other supplies needed for an individual's coursework.
• Smart-casual dress code.

Location: Applicants are expected to work onsite in our New York City office in accordance with our hybrid working policy. 

Compensation Range: ICONIQ is required by law to include a reasonable estimate of the salary range for this role. There are several factors taken into consideration in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. At ICONIQ, we apply a total reward philosophy where all aspects of compensation and benefits are taken into consideration in determining compensation terms. A reasonable estimate of the current salary range is $90,000 - $100,000 together with the benefits listed above.