Cyber Security Specialist in Chicago, Illinois at Society of Actuaries Research Institute

Cyber Security Specialist

Your Purpose: The Cyber Security Specialist is responsible for defending the organization from cyber security threats and risks facing any organizational asset or business function, while pro-actively monitoring the environment and enforcing security standards and procedures. Recommends changes to the organization’s technology infrastructure, software, equipment, or business practices to mitigate security risks. Responsible for leading the response to any incident involving security concerns, threats or data breaches.

Security Operations, Monitoring, and Response

• Operate and manage core security systems, including SIEM, endpoint protection, vulnerability management, DLP, password management, security awareness, and external threat monitoring tools.

• Maintain security logging, monitoring, and alerts across endpoints, networks, cloud infrastructure, Microsoft 365, applications, and critical systems.

• Investigate security incidents, lead containment, eradication, and recovery efforts, and document findings, evidence, lessons learned, and corrective actions.

• Develop security dashboards, reports, scripts, and automation to improve threat detection, response, and operational efficiency.

Vulnerability and Exposure Management

• Conduct vulnerability scans across internal systems, cloud environments, external-facing assets, applications, and third-party services.

• Assess vulnerabilities, security advisories, and emerging threats; prioritize risks and lead remediation tracking and validation.

• Lead penetration testing and external security assessments, including scoping, vendor coordination, and validation of findings.

• Perform required PCI scans and coordinate resolution of identified exceptions.

Security Governance, Risk, and Compliance

• Maintain cybersecurity policies, standards, procedures, the Information Security Plan, and Cyber Security Incident Response Plan.

• Conduct security risk assessments and support audits, control reviews, and compliance activities, including PCI and applicable data protection requirements.

• Maintain security risk and exception records, including remediation commitments, ownership, deadlines, and closure evidence.

• Manage third-party security risk reviews, including vendor documentation, security-related contract provisions, and follow-up actions.

• Develop cybersecurity metrics, reports, and presentations for technical and business stakeholders.

Security Awareness, Collaboration, and Project Delivery

• Lead security awareness initiatives, including new-hire training, annual training, phishing simulations, and employee communications.

• Evaluate security technologies, recommend improvements, and lead cybersecurity projects involving internal teams and external vendors.

Additional Expectations

Provide occasional after-hours support for significant cybersecurity incidents and communicate security requirements and findings effectively to technical and non-technical stakeholders.

What You’ll Need:

Bachelor’s degree in computer information systems, Computer Science, or related field is required

• 5-7 years of experience in the information technology services industry is required, including at least 3 years in a security-related role, and at least 3 years in a system and/or network administrator role
• Active (or currently pursuing) Comp TIA Security + security credential or equivalent
• Hands-on technical expertise is required
• Ability to work within SOA’s standardized, Windows-based technology environment and established device policies.

What We Offer:

• Competitive Compensation: We understand the value of your contributions, and we ensure that you are rewarded competitively for your skills and dedication.
• Generous Paid Time Off: Achieve a work-life balance with ample paid time off, giving you the flexibility, you need for personal and family responsibilities.
• Professional Development: We invest in our team's growth. Take advantage of opportunities for continuous learning and career advancement, including tuition reimbursement and continuing education funding.
• Health and Wellness: Your well-being is important to us. Enjoy access to comprehensive health benefits, wellness programs, including our Employee Assistance program (EAP) and wellness reimbursement.
• Disability Coverage: Gain peace of mind with our comprehensive disability coverage, including life, short-term, and long-term disability benefits.
• Retirement Planning: Secure your future with our 403(b) plan and generous employer contribution.
• Maternal/Paternal Leave: Embrace parenthood with confidence, knowing that we've got you covered every step of the way. Our maternal/paternal leave policy is designed to give you the time you need to bond with your newest family member without worrying about work.
• Flexible Work Environment: Embrace a flexible hybrid environment that supports your productivity and work-life balance.
• Diversity and Inclusion: We celebrate diversity and foster an inclusive workplace where everyone's unique perspectives are valued.

The SOA will provide equal opportunity to all employees and applicants for employment regardless of actual or perceived race, color, religion, age, sex, pregnancy, national origin, ancestry, disability (mental or physical), genetic information, military or veteran status, marital status, order of protection status, gender identity, sexual orientation or any other category protected by applicable law. Such action shall include but is not limited to: initial consideration for employment; job placement and assignment of responsibilities; performance evaluation; promotion and advancement; compensation and fringe benefits; training and professional development opportunities; formulation and application of human resource policies and rules; facility and service accessibility; and discipline and termination.