F

Fidelity International

Investment management and retirement solutions provider

Information Security Analyst

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-time

About the Job

Requirements

  • 2-3 years of relevant experience in the financial services industry.
  • A bachelor's degree in Information Technology, Computer Science, or a related discipline, or equivalent working experience.
  • Knowledge of vulnerability assessments, secure code, and infrastructure security reviews for internal and external-facing web applications.
  • Knowledge of software development life cycle methodologies and tools.
  • Knowledge of secure access modeling, threat modeling, digital security methodologies and deployments, and security architecture.
  • Understanding of cloud security and the capabilities of Amazon and Microsoft Azure.
  • Understanding of industry audit standards, including SSAE-16, FFIEC, and PCI-DSS.
  • Ability to multitask and handle multiple projects.
  • Current work authorization for Canada is required.

Responsibilities

  • Ensure the development life cycle complies with information security policy requirements on secure coding and secure access controls.
  • Test compliance with security policies and procedures, and assist in the creation, implementation, and/or management of security solutions.
  • Ensure information security policy requirements are communicated to and considered by internal infrastructure and development teams as well as third-party vendors.
  • Perform vulnerability analysis and issue management in pre-production and production applications and systems using standard application vulnerability scanning tools.
  • Review and challenge proposed changes to application controls, including data encryption, user security profiles and bands, entitlements, and input, processing, and output controls such as edit checks, control totals, and data validation and integrity checks.
  • Assist with the assessment and integration of cloud vendors and software as a service from an information security requirements perspective.
  • Review and update application security information and documentation in the asset registry.
  • Conduct external security reviews of vendors with access to confidential information or that perform critical functions.
  • Assist in monitoring the data loss prevention tool and conduct investigations.
  • Assist in conducting security training and awareness activities.
  • Assist the disaster recovery team, including supporting disaster recovery tests.

Desired Qualifications

  • A development background is highly desirable.
  • Knowledge of Fortify, Veracode, Checkmarx, AppScan, and ServiceNow.
  • CISSP and cloud security certification.

About the Company

Fidelity International

Investment management and retirement solutions provider

Fidelity International provides investment solutions and retirement expertise for institutions, individuals, and their advisers around the world. It offers a range of investment management services, personal investing platforms, and retirement savings products, using both its own funds and third-party options. Clients access these tools to pursue long-term financial goals, with revenue coming from management and advisory fees. The company integrates sustainability and responsible investing into its operations and investment processes, aiming to deliver long-term, sustainable outcomes for clients. The goal is to help clients build better financial futures and maintain financial health over time.

Company size
5,001-10,000
Company stage
IPO
Headquarters
London, United Kingdom
Founded
1969

Recently Posted Jobs

Explore more opportunities at Fidelity International

See more jobs