Senior Associate, Information Security, AI Governance Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Support the VP of Integration & Information Security (ISO) in overseeing information security, cybersecurity, and AI governance across Lido Advisors, LLC and its affiliated entities.

• Contribute to the development and maintenance of a multi-year cybersecurity strategy and roadmap that aligns with business priorities and NIST CSF.

• Monitor improvements in security posture and prepare risk assessments, program status updates, and metrics reports for the ISO, executive leadership, and the Board.

• Draft, revise, and uphold information security and cybersecurity policies and standards.

• Execute vendor and third-party risk management tasks, including conducting due diligence, assigning risk ratings, and performing ongoing monitoring.

• Carry out security evaluations of new platforms, applications, and technologies, presenting findings to the ISO.

• Manage cybersecurity awareness initiatives, phishing simulations, and training programs.

• Oversee managed service provider performance, including service level agreements (SLAs), controls, and unresolved issues, escalating them to the ISO as necessary.

• Assist in the planning and management of the Claude Enterprise rollout, which includes phasing, onboarding, and tracking adoption.

• Aid in drafting and maintaining policies, standards, and guidance for AI usage.

• Monitor AI use cases and approvals while tracking the usage of AI tools.

• Facilitate the creation and delivery of training focused on safe, effective, and compliant AI practices.

• Manage AI access controls, permissions, and safeguards for data handling.

• Support the enterprise AI operating model, covering roles, decision rights, and intake procedures.

• Evaluate AI vendors and platforms for security, privacy, regulatory compliance, and alignment with business needs.

• Assist in insider-risk investigations, including assessments related to employee departures.

• Review user activities and file movements to identify any potential data exfiltration.

• Collect and preserve forensic evidence, ensuring proper documentation of the chain of custody.

• Provide technical investigative support for matters related to employees.

• Aid in preparing technical findings, data preservation, and evidence for legal proceedings.

• Analyze IP addresses, sign-in activities, and access patterns to determine user engagement.

• Reconstruct security events and incident timelines from logs and system data.

• Collaborate with Compliance, Legal, Technology, HR, Advisors, business leaders, executive leadership, the Board, managed service providers, vendors, auditors, and external counsel.

⛳️ Requirements

• Minimum of 3 years of experience in Information Security.

• Familiarity with third-party risk assessments or experience working with managed service providers.

• Practical experience in digital forensics, insider-risk investigations, and evidence management within Microsoft 365 and cloud file platforms.

• Interest in AI governance; experience in supporting technology or AI implementations is a plus.

• Strong written and verbal communication skills, including the ability to summarize technical findings for non-technical audiences.

• Relevant certifications are preferred, such as CC, Sec+, CySA+, SSCP, GCFA.

• Nice-to-have: Experience in the financial services sector or another regulated industry.

• Nice-to-have: Familiarity with SEC requirements for investment advisers, including Regulation S-P.

• Nice-to-have: Understanding of NIST CSF, NIST AI RMF, and ISO/IEC 42001.

🏝️ Benefits

• Comprehensive health and wellness programs.

• Opportunities for professional development and continuous learning.

• Flexible work arrangements to support work-life balance.