Cyber Security Analyst

M Financial Group:

With more than 140 Member Firms located primarily across the United States, M Financial is one of the nation's leading financial services design and distribution companies. Since 1978, our network of independent insurance, investment, and executive benefit firms has served the needs of ultra-affluent individuals, corporate executives, successful entrepreneurs, and Fortune 1000 companies. Our Member Firms are independent but work together toward a common goal: to offer a broad range of sustainable solutions designed to help their clients meet their financial goals.

Role Summary:

The Cyber Security Analyst (CSA) is responsible for monitoring, tracking, and supporting the remediation of cybersecurity and compliance issues across both M Financial and Member Firms. The CSA assists in ensuring that systems, processes, and controls remain aligned with applicable security standards, regulatory requirements, and organizational policies.

This role supports the identification, assessment, and documentation of regulatory compliance obligations, information security risks, control deficiencies, and cybersecurity best practices. The CSA also helps evaluate compliance with the Member Firm Information Security Policy (MFISP) and contributes to ongoing efforts to strengthen the organization's overall security and compliance posture.

Responsibilities:Compliance & Audit

• Lead response to audits from regulators, independent auditors, and third-party risk assessments (partners, carriers, brokers, cyber-insurance providers)

• Ensure security controls demonstrate fulfillment of regulatory and contractual obligations

• Analyze management and technical controls to verify secure configurations, documented processes, and standards

Member Firm Support

• Monitor Member Firm security posture; document gaps, track progress, and follow up to ensure MFISP and regulatory compliance

• Partner with Member Firms' Managed Service Providers (MSPs) to strengthen their security posture

• Coordinate and facilitate Member Firm security incident reporting

Program & Policy Development

• Contribute to and update information security policy, standards, and controls

• Support development of security processes, procedures, and SLAs

• Help create standard operating procedures and protocols

Cross-Team Collaboration

• Work with Core Technology and Cybersecurity teams to track remediation and vulnerability mitigation

• Support security and privacy awareness training for internal and Member Firm employees

• Provide security advice across the organization (controls, assessments, remediation)

• Track metrics and recommend process improvements for compliance deadlines and progress

Ongoing

• Act as the primary intake and triage resource for cybersecurity-related tickets in the Salesforce queue, ensuring timely assessment, prioritization, escalation, and coordination of incident and service requests in accordance with established procedures and service level expectations.

• Stay current on security products, trends, and emerging threats

• Research new security technologies to safeguard company and Member Firm data

• Other duties as assigned

Core Competencies:

• Strong written/verbal communication (reports, documentation, stakeholder and regulator correspondence)

• Ability to explain technical topics to non-technical audiences

• Policy comprehension and ability to train others on it

• Security fundamentals: vulnerability management, risk assessment, auditing, incident response, compliance

• Network applications/protocols, logging, monitoring

• Problem-solving, technical troubleshooting

• Self-starter with initiative, learning agility, growth mindset

• Teamwork and organizational awareness

Qualifications:

• Bachelor's degree required (a Cybersecurity degree can offset one year of experience)

• 1–3 years in information security and security compliance

• Working knowledge of NIST CSF, SEC, SOC 2, and FINRA standards

• Security certification and/or professional IT experience are strongly preferred (e.g., Security+, Network+)

• Strong analytical/critical-thinking skills and high attention to detail

• Ability to build relationships with internal and external stakeholders quickly

• Comfortable presenting to groups of varying size and technical fluency

Job Conditions & Environment:

• This position is based on-site at our offices in Uptown at the Quad in Dallas, TX with the flexibility to work one day per week remotely

• Normal office environment/desk assignment

• Regularly operates a computer and other standard office equipment to perform essential job functions, such as data entry, document preparation, and electronic communication

This position description is not intended to be and should not be construed as an all-inclusive list of responsibilities, skills or working conditions associated with this position. While this description is intended to accurately reflect the position’s activities and requirements, management reserves the right to modify, add or remove duties as necessary.

M Financial is proud to be an equal opportunity workplace.

#LI-KS1