Fractional Cyber Security Analyst (Advisor Network)

About Arootah

Arootah is a talent solutions firm purpose-built for the alternative investment industry. We advise and we execute, covering the full talent spectrum from entry to exit across five services: Talent Acquisition, Fractional Leadership, Talent Development, Retention & Compensation, and Transition. 

Most talent firms solve one problem. Because we cover the full spectrum, we can help clients identify and solve the right one. We start with diagnosis, then deliver. 

Our team has run alternative investment firms at the highest levels as COOs, CFOs, and CCOs. That operator experience, combined with 15+ years of alternatives-specific recruiting and a network of 700+ vetted advisors across 18 functional disciplines, is what makes the advice credible and the execution reliable. We also draw on a network of 600+ coaches, deploying those with specific experience guiding senior executives in the alternatives industry. 

One industry. One talent partner. Entry to exit. 

Learn more: https://arootah.com/ 

Who We’re Looking For

Arootah is searching for experienced Cybersecurity Analysts to consult to our highly prestigious client base.  As a consultant, you will work with our Hedge Fund and Family Office clients to provide expert advice. Having previously served in this role, you have specific, hands-on experience implementing, maintaining, and operating a cybersecurity program for a leading Hedge Fund or Family Office.  

Core Areas of Expertise

• Best practice reviews.   

• Developing realistic and effective action plans.  

• Breaking apart goals into actionable steps.   

• Advising on vendor selection and oversight.    

• Creating and implementing policies, procedures, and control measures.   

• Evaluating each client’s advancement toward goal actualization through key performance indicators (KPIs) and scoring matrices.   

• Special projects or other areas of need.    

• Implement and assist with the day-to-day operations of securing the firm’s various information systems by providing technical expertise in all areas of network, system, and application security.  

• Protect sensitive information by installing and configuring security software like firewalls and encryption programs.  

• Monitor network traffic and analyze records like authentication logs to identify and investigate anomalies to prevent and detect security incidents.    

• Lead the firm's vulnerability management program, conduct the annual cybersecurity assessments and penetration tests, and research and report on emerging threats, to help the firm take pre-emptive risk mitigation steps.  

• Implement organization-wide security best practices to protect the business against existing, new, and emerging security threats.  

• Test and analyze the organization’s business continuity and disaster recovery plan to ensure operations will continue in the event of a cyberattack or natural disaster.    

• Assesses new security technologies to determine potential value for the firm.    

• Execute and carry out firm incident response program to identify and prevent all potential breaches (internal or external), or misuse of data, that may occur.  

• Review, investigate, and respond to real-time alerts within the environment.   

• Generate real-time and historical reports for internal and external stakeholders regarding security and/or compliance violations.    

What You Bring

• A Bachelor’s degree in Computer Science, Computer Engineering, Information Systems, Information Sciences, or a related field, with a strong academic record.  

• One or more of the following certifications: CEH, CISM, CompTIA Security+, CISSP, GSEC, GCIH, GNFA, GREM or other related SANS certifications.    

• 5+ years of specific experience as a Cybersecurity Analyst at a hedge fund or family office.    

• Working experience with one or more of the following technology vendors and products: Splunk Cloud, Rapid7 Nexpose Vulnerability Scanner, Sophos Antivirus, Varonis DatAlert, ForeScout CounterACT, or similar.    

• Thorough understanding of Microsoft’s enterprise technology platform, including Azure, Active Directory, SQL, Office365, and the Windows server and desktop operating systems.  

• In-depth knowledge of security event management, network security monitoring, investigating common types of attacks, network packet analysis, log collection and analysis, and reviewing security events.  

• Demonstrated experience implementing and/or enforcing security and compliance frameworks such as NIST, Cobit, and ISO.  

• Strong writing and presentation skills are requiredin order to communicate findings and recommendations, as well as the ability to articulate security-related concepts to a broad range of technical and non-technical staff.