Job Specifications
CYBERSECURITY ADVISOR (Hybrid position in NYC & Boston)
Working in Advisory:
The Advisory Group is a core group within Drawbridge. As an agile team, Advisory works to provide best-in-class service and support to our clients. As a Cybersecurity Advisor, you will assist with maintaining relationships with clients, their IT resources, and associated third parties. You will work to gain an understanding of the Drawbridge business process, engagement deliverables and services, cybersecurity risk management, IT controls, and regulatory standards. In this highly team collaborative role, you will gain valuable hands-on experience, working with many of the world's most successful asset management firms.
The Cybersecurity Advisor will report to a Advisory Manager.
Our Values
Innovation: As the market leader, Drawbridge draws on its in-depth, collective expertise in its constant effort to innovate both our platform and our approach to service
Integrity: Our clients and partners lean on us because they know we are trustworthy and honor what we say
Collaboration: We are here to win, and we only win when we work together across team
Diversity: We are inclusive. We honor, respect, and appreciate each other's differences and perspectives
In this role you will:
Be primary point of contact for Drawbridge clients
Lead kick off call and create success plans for new clients
Execute on success plans * Work closely with the Account/Relationship Management team to ensure positive client health. Manage post deliverable CSAT
Execute on Tech-enabled Platform Strategy (100% CRA review calls are performed within the platform) including: Engage with clients through the platform and showcase new tools on the platform
You will partner with other CS professionals to help define best practices for client service and provide feedback from clients on platform to the product team
Assist with client projects and develop the skills to lead projects
Assist with tailoring the project management framework, approaches, and methods to help streamline projects
Identify tasks necessary to remediate identified risks and vulnerabilities for clients and service providers
Conduct risk analysis, assessments, and security audits using internal and third-party tools
Demonstrate an advanced understanding of business processes, internal control risk management, IT controls, and related standards
Identify and evaluate complex business and technology risks, controls to mitigate risks, and related opportunities for control improvement
Understand business, information technology, risk, and operational management processes
Interpret controls and provide suggestions for mitigation strategies to clients and service providers
Learn the regulatory framework and compliance guidelines for cybersecurity for the SEC, NFA, FCA, MAS, and any other regulatory agency applicable to our clients
Ensure projects are completed within a reasonable time frame and monitor the status of projects
Initiate periodic check-ins with clients to ensure services and projects are up to par with client expectations
Follow up with clients and service providers to ensure document requests or documents needing review are addressed
Update internal trackers, provide status updates to project managers, and ensure other internal matters relating to projects or clients are kept up-to-date
Maintain relationships with clients, IT providers, and other service providers
Project Responsibilities:
Prepare summary and gap analysis reports highlighting the features of our clients' cybersecurity programs
Schedule, conduct, and lead risk assessment meetings with clients and IT providers to obtain information regarding a client's security and privacy controls
Prepare risk assessment reports and discuss the assessment findings with clients
Conduct cybersecurity due diligence on our clients' service providers
Send, track, and store due diligence questionnaires and corresponding documents from service providers
Create deadlines, send reminder emails, and deadline extension notifications to service providers
Review due diligence submissions from service providers and follow up with service providers, where necessary
Prepare risk assessment reports based on the due diligence exercise and discuss the assessment findings with clients
Conduct live or schedule online training for clients
Track the status of the trainings scheduled online and prepare training reports
Conduct live or virtual incident response tabletop exercises
Prepare tabletop exercise summary reports
You Have:
Bachelor's Degree, preferably in General Business, Finance, or Accounting
6-10 Years of Experience, preferably in a customer facing and/or support role
Familiarity with Microsoft Office products (Outlook, Word, Excel, PowerPoint)
Experience with CRM software, including Salesforce Service Cloud
Experience with Ticketing and Tracking Systems (e.g., Jira, ConnectWise)
Knowledge of hedge fund, private equity, or RIA operations/compliance a huge
About the Company
Drawbridge is a premier provider of cybersecurity software and solutions to the alternative investment and wealth management industry. Its proprietary platform helps firms manage their governance, risk, and compliance (GRC) requirements while combatting sophisticated cyber threats and third-party risks. Drawbridge's platform connects business, compliance, and IT to empower firms to centralize and manage their most robust security programs, improve their risk profile and raise institutional capital. With a tested team focused...
Know more