Sr. Associate, Information Security & AI Governance Analyst

This role supports the VP of Integration & Information Security (ISO) in managing information security, cybersecurity, and AI governance for Lido Advisors, LLC and its affiliated entities, which operate under multiple state and federal regulators. It helps execute the firm's security strategy, supports enterprise AI adoption, and assists with investigations and digital forensics for Legal and Compliance.

1. Information Security & Cybersecurity

Assists the ISO in identifying, prioritizing, and executing security initiatives across all entities.

• Strategy and roadmap: Help develop and maintain the multi-year cybersecurity strategy and roadmap, aligned to business priorities and NIST CSF.

• Posture and reporting: Track security posture improvements; prepare risk, program status, and metrics reporting for the ISO, executive leadership, and the Board.

• Policy: Draft, update, and maintain information security and cybersecurity policies and standards for each entity.

• Third-party risk: Perform vendor and third-party risk management tasks, including due diligence, risk ratings, and ongoing monitoring.

• Technology reviews: Conduct security reviews of new platforms, applications, and technologies and present findings to the ISO.

• Awareness and training: Administer cybersecurity awareness, phishing simulation, and training programs for all staff.

• MSP oversight: Monitor services delivered by the managed service provider (Align), including SLAs, controls, and open issues, and escalate to the ISO.

2. AI Governance & Enterprise AI Enablement

Supports the ISO in coordinating the firm's AI adoption.

• Rollout planning: Help plan and manage the Claude Enterprise rollout, including phasing, onboarding, and adoption tracking.

• AI policy: Help draft and maintain AI use policies, standards, and acceptable-use guidance.

• Usage governance: Track AI use cases and approvals and monitor how AI tools are used.

• Education and training: Help create and deliver user training on safe, effective, and compliant AI use.

• Access controls: Administer AI access controls, permissions, and data-handling safeguards.

• Operating model: Support design and upkeep of the enterprise AI operating model, including roles, decision rights, and intake processes.

• Vendor evaluation: Assess AI vendors and platforms for security, privacy, regulatory, and business fit, and present findings to the ISO.

3. Investigations, Insider Risk & Digital Forensics

Assists the ISO with forensic and investigative activities in support of Legal, Compliance, and HR.

• Insider risk: Assist with insider-risk investigations, including reviews tied to employee departures.

• Data exfiltration: Review user activity and file movement for evidence of data exfiltration.

• Evidence collection: Collect and preserve forensic evidence with documented chain of custody.

• Employee investigations: Provide technical investigation support for employee-related matters.

• Litigation support: Help prepare technical findings, data preservation, and evidence for Legal.

• IP-address analysis: Analyze IP addresses, sign-in activity, and access patterns to establish user activity.

• Event reconstruction: Reconstruct security events and incident timelines from logs and system data.

• 3+ years in Information Security.

• Exposure to third-party risk assessments or working with managed service providers.

• Hands-on experience with digital forensics, insider-risk investigations, and evidence handling in Microsoft 365 and cloud file platforms.

• Interest in AI governance; experience supporting technology or AI rollouts a plus.

• Clear written and verbal communication, including summarizing technical findings for non-technical audiences.

• Relevant certifications are preferred, such as CC, Sec +, CySA +, SSCP, GCFA.

• Nice-to-have: Experience in Financial services or another regulated industry, working knowledge of SEC requirements for investment advisers (including Regulation S-P) and frameworks such as NIST CSF, NIST AI RMF, and ISO/IEC 42001

Key Relationships 

Compliance, Legal, Technology, HR, Advisors and business leaders, executive leadership and the Board, the managed service provider, and external partners such as vendors, auditors, and outside counsel.

Lido Advisors is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other protected characteristic. 

#LI-JM1