Careers

FS-ISAC - Position Openings

Associate, Business Development (APAC), FS-ISAC

Director, Information Security, FS-ISAC

General Manager, Operations Services, FS-ISAC

Product Manager, FS-ISAC

Sales Coordinator, FS-ISAC

Senior Intelligence Analyst (APAC), FS-ISAC

Tactical Threat Intelligence Analyst, GRF

Full job descriptions of the positions listed above are available following the position openings section. To apply, please send a cover letter and resume to HR@fsisac.com with the position's title listed in the subject line or click the following link: Careers at FS-ISAC

 


 

Financial Services Information Sharing and Analysis Center (FS-ISAC)

Position: Associate, Business Development (APAC)

Job Status: Full Time                                                                         FLSA Status: Exempt

Reports To: the SVP of Sales and Marketing                                    Position Supervised: NA

Work Schedule: Normal Office Hours                                              Travel Required: TBD

 

POSITION SUMMARY

The Financial Services Information Sharing and Analysis Center (FS-ISAC), was created by and for members and operates as a member-owned non-profit entity. FS-ISAC provides vital information to the financial services sector to assist financial firms in protecting their critical infrastructure assets and confidential information.

This associate is part of the team responsible for revenue generation and growth at FS-ISAC and reports into the SVP of Sales and Marketing Work closely with the Managing Director of Global and the Regional Directors and Intel Officers. This position is characterized by strong cold calling and writing skills, research and project management skills. This position is responsible for navigating multiple databases and ensuring data integrity at all times.

ESSENTIAL FUNCTIONS 

Responsible for lead generation to grow memberships in the region.

Research, identify and vet new prospects and contacts using LinkedIn, member and vendor/Affiliate referrals other search engine tools.

Responsible to find new leads at banks, and financial organizations. Plus, at vendor/partner companies.

Willingness to cold call and prospect utilizing best practices of referrals and other methods.

Conduct personalized email/phone campaigns to drive appointments for the regional directors and increase prospect event registrations for Summits, webinars and regional member/prospect meetings.

Schedule appointments for prospects with the regional director, global intel officer.

Join pipeline calls with regional directors in each region and manage/ensure account progress.

Create agreements for new members along with other pertinent documents.

Ability to interact successfully via phone and email with senior executives and executive assistants.

Send action items to internal departments and record all notes Salesforce.

Entering data and cleaning prospect data utilizing Salesforce, Hoovers and other systems.

Creating and utilizing reports and list pulls for data and marketing sends.

Work closely with Marketing/Communications team to develop campaigns.

Attend Summits, regional meetings and other events with heavy prospect attendance.

Perform other assignments as needed.

 

POSITION QUALIFICATIONS

To perform the job successfully, an individual should demonstrate the following competencies:

Analytical - Collects and researches data; uses intuition and experience to complement data.

Business Acumen - Understands business implications of activities; exhibits interest in learning business cultures from around the world.

Interpersonal skills - Effectively interacts with individuals with variety of backgrounds and experience.

Oral Communication - Speaks clearly and persuasively in positive or negative situations; listens and gets clarification.

Organizational Support - Follows established policies and procedures; completes administrative tasks correctly and on time; supports organization's goals and values.

Planning and Organizing - Prioritizes tasks and activities effectively; handles multiple tasks simultaneously; ability to plan, coordinate and implement activities.

Problem Solving - Independently identifies potential problems; effectively communicates issues; offers problem solving input.

Professionalism – Self-motivated; responsible and disciplined; demonstrates a strong team orientation.

Quality Management - Is detail-oriented; consistently turns in high-quality work without close supervision.

Written Communication - Writes clearly and informatively; able to edit and write documents.

 

EDUCATION

  • Bachelors’ degree in Marketing, Sales, Business Administration or related field.

 

EXPERIENCE 

  • Minimum of three years of sales experience and customer service.
  • Experience of the financial sector, IT Sector or IT Security Sector are highly desirable.
  • Fluent in English. Other languages used in the region are highly desirable.

 

TECHNOLOGY APPLICATIONS & PLATFORMS 

  • Experience in Marketing or Sales database administration.
  • Familiar with Sales Force, LinkedIn, Pardot, Skype and the ability to move around in a portal.
  • Proficient in MS Office365 applications including One Drive, Outlook, Word, Excel and PowerPoint.

 


 

Financial Services Information Sharing and Analysis Center (FS-ISAC)

Position: Director, Information Security

Job Status: Full Time                                                                         FLSA Status: Exempt

Reports To: Mid-Level Management                                                Position Supervised: TBD

Work Schedule: Normal Office Hours                                              Travel Required: 5-10%

 

POSITION SUMMARY

The Financial Services Information Sharing and Analysis Center (FS-ISAC) is a non-profit corporation that was established in 1999 and is funded by its member firms. The FS-ISAC is a member-driven organization whose mission is to help assure the resilience and continuity of the global financial services infrastructure and individual firms against acts that could significantly impact the sector’s ability to provide services critical to the orderly function of the global economy. The FS-ISAC shares threat and vulnerability information, conducts coordinated contingency planning exercises, manages rapid response communications for both cyber and physical events, conducts education and training programs, and fosters collaborations with and among other key sectors and government agencies.


As one of the premier ISAC’s, the FS-ISAC has a history of innovation and delivering valuable products and services to our members to help achieve our mission. To ensure our members are continuously aware and prepared for today’s threats and tomorrow’s challenges, the FS-ISAC is seeking a Director, Information Security to lead the FS-ISAC security program.

 

JOB DESCRIPTION

The position of Director - Information Security is responsible for overseeing the day-to-day operations of the organizations Information Security program helping to establish the security strategy and the overall risk posture of the organization through the development of a comprehensive risk management program. This program is appropriate for the risk appetite of the organization focusing on the confidentiality, integrity, and availability of the organization and membership's information assets.

This position reports directly to the Chief Information Risk Officer and will support the CIRO in communicating with the Board of Directors Security & Risk Committee.

 

RESPONSIBILITIES

Establish and maintain a global cyber risk and security program driven by established information protection and physical security policies. Collaborate with internal stakeholders to develop processes and procedures to carry out the intended goals of the policies.

Responsible for the development and management of a robust security program responsible for security operations, administration of logical and physical access, monitoring of threats against the organization and membership, vulnerability management, intrusion detection/prevention, malware detection/prevention/analysis, data loss prevention, forensics, incident response, and event logging/correlation.

Responsible for the continuity of business/disaster recovery program of the organization working closely with the Director of IT and Director of Business Resiliency to facilitate.

Having advanced knowledge of the global threat landscape, the incumbent will also shape the direction of the Intelligence program integrating threat information compiled from disparate sources with data available from email distro lists, vendor feeds, and commercial.
 
products to maintain existing intelligence products as well as enabling the creation of new product capabilities.

Be a global strategic thinker who knows how to integrate people and process with procedure while always executing on the broader mission.

Superb interpersonal skills to manage a highly diverse and global staff working in a fast- paced and dynamic environment.

Align with priorities and mission of the Chief Operating Officer, CIRO, & VP - Information Technology to ensure security is "baked in" to all operational functions of the organization.

 

DESIRED SKILLS AND EXPERIENCE

  • Strategic thinking, thought leadership, strong presentation skills.
  • Certification with ISSEP/CISSP, CISM, GSEC, etc.
  • Outsourcing management experience.
  • Strong working knowledge of global threat landscape from both a physical and cyber perspective.
  • 15+ years of experience leading a global cyber security program.
  • Ability to forge and maintain strong relationships with various government agency officials, membership leadership, and vendor executives.
  • Exceptional ability to manage resources and priorities across multiple time zones and countries; Multi-cultural knowledge a plus.
  • Previous CISO, Deputy CISO, or senior manager experience desirable.
  • Previous law enforcement or inter-agency experience preferred.

 

ADDITIONAL INFORMATION

  • An equitable compensation package will be provided commensurate to work experience & job requirements.
  • Ability to obtain a Clearance up to Top Secret from US government partner agency preferred.
  • The FS-ISAC offers a comprehensive benefits package including paid time off, medical, and dental benefits paid for by the employer, annual bonuses, 401k plan with company match and others.

 

REQUIRED EXPERIENCE

  • Cyber Security, Threat Intelligence, Vulnerability Management, Business Continuity, Security Operations, Security Architecture and Design, Identity & Access Management, Risk Management, Compliance & Audits, Business Enablement: +15 years

 

REQUIRED EDUCATION

  • Bachelor's Degree in Computer Science, Business, Engineering, or related field.
  • Master's degree or equivalent work experience preferred.

 

LOCATION

  • This position will be based in our Reston, VA global headquarters

 


 

Financial Services Information Sharing and Analysis Center (FS-ISAC)

Position: General Manager, Operations Services

Job Status: Full Time                                                                         FLSA Status: Exempt

Reports To: Global Intelligence Officer                                            Location: Reston, VA

Work Schedule: Normal Office Hours                                              Travel Required: 5%

 

POSITION SUMMARY

The Financial Services Information Sharing and Analysis Center (FS-ISAC) is a non-profit corporation that was established in 1999 and is funded by its member firms. The FS-ISAC is a member-driven organization whose mission is to help assure the resilience and continuity of the global financial services infrastructure and individual firms against acts that could significantly impact the sector’s ability to provide services critical to the orderly function of the global economy. The FS-ISAC shares threat and vulnerability information, conducts coordinated contingency planning exercises, manages rapid response communications for both cyber and physical events, conducts education and training programs, and fosters collaborations with and among other key sectors and government agencies. 

This position will serve as a General Manager of Operations Services in Reston, VA. 

 

JOB DESCRIPTION

The position of General Manager, Operations Services is responsible for managing the alerting center and data feeds regarding cyber and physical threats, vulnerabilities, and incidents. The General Manager will lead the teams that ensure timely alerting and valueadded technical intelligence to the FS-ISAC community. The General Manager, Operations Services position reports directly to the Global Head of Intelligence. 

 

ESSENTIAL FUNCTIONS 

Manage the FS-ISAC’s alerting and data feed capabilities ensuring the timely notification of cyber, fraud and physical incidents to the FS-ISAC community.

Develop and manage operational processes and procedures on the monitoring, alerting and response to member incident data. Work with the Global Intelligence Office on escalations. 

Manage the incident response hotline and associated services and processes. 

Work with the Business Resilience team and the Global Intelligence Office during major incidents.

 

POSITION QUALIFICATIONS 

Indications & Warning – Will have experience working in an I&W alerting center with knowledge of how to triage incoming information, establish standards for prioritization and work with teams on incoming data feeds. 

Technical Intelligence Handling – Is knowledgeable on indicator automation standards and related technologies, including STIX/TAXII, MISPs and TIPs. Is familiar with the Mitre ATT&CK and pre-ATT&CK frameworks and uses of the frameworks and is familiar with collaboration platform management. 

Critical Thinking Skills – Is able to approach information and data in an objective and rational manner, understand bias and possible relationships of importance, and apply methods of examination to construct a clear and informed judgement. 

Organizational Skills – Possesses strong time management skills to work multiple projects at the same time and to a high degree of quality. 

People Management Skills – Experienced with managing people, establishing individual and team goals, using project management tools, communicating direction clearly, working with different personality types, providing objective individual assessments, developing personal improvement plans, working with virtual teams and tracking team progress. 

 
DESIRED SKILLS AND EXPERIENCE  

  • 15+ years of experience in cyber security in areas such as security operations or incident response 
  • Exceptional ability to manage resources across multiple time zones and countries; multicultural knowledge and sensitivity  
  • Strong working knowledge of global cyber security landscape  
  • Strategic thinking, thought leadership, strong presentation skills 
  • Strong network in the cyber security industry 

 

ADDITIONAL INFORMATION  

  • An equitable compensation package will be provided commensurate to work experience & job requirements 
  • The FS-ISAC offers a comprehensive benefits package including paid time off, medical, vision and dental benefits, annual bonuses, 401k plan with company match and others. 

 
EDUCATION 

  • Bachelor's Degree in related field 
  • Master's degree or equivalent work experience preferred 
  • Certification with ISSEP/CISSP, CISM, GSEC, etc. 

 


 

Financial Services Information Sharing and Analysis Center (FS-ISAC)

Position: Product Manager

Job Status: Full Time                                                                        FLSA Status: Exempt

Reports To: Chief Innovation Officer                                               Position Supervised: NA

Work Schedule: Normal Office Hours                                             Travel Required: Minimal

 

POSITION SUMMARY

The Financial Services Information Sharing and Analysis Center (FS-ISAC), was created by and for members and operates as a member-owned 501(c)(6), not-for-profit entity. FS-ISAC serves as a bi-directional information and intelligence organization leading the financial services sector efforts to protect against and mitigate as needed cyber and physical threats and incidents against financial firms.

This position is responsible for ensuring our members and our partners are enabled to realize optimum value from their participation in our programs. The position will own the Digital Events product line to include the Expert Resource Pool, Expert Webinar Series, and Solution Showcases. Responsibilities include developing project plans, activities that drive success metrics, relationship and retention activities. This position works closely with project management office, communications, events, marketing and sales teams.

 

ESSENTIAL FUNCTIONS

Develop and manage product plans aligned with revenue goals and company objectives.

Influence lifetime value with expansion of upsell, cross-sell, satisfaction scores.

Identify success metrics and measurements creating useable data reporting.

Define and optimize the customer lifecycle mapped to revenue goals and budgets.

Identify and implement scalable business improvement practices.

Define and standardize customer segmentation and personas based on data.

Establish touchpoints in customer journey and establish criteria for intervention.

 

POSITION QUALIFICATIONS

Ability to drive success through persuasion, negotiation and consensus building.

Strong empathy for customers and passion for revenue and growth.

Deep understanding of value drivers in recurring revenue business models.

Understands and uses data driven frameworks to support marketing and sales.

Prioritize activities effectively with ability to handle multiple tasks simultaneously.

Enthusiastic and creative leader with the ability to engage others.

Excellent interpersonal communication and presentation skills.

Use problem solving skills to identify and communicate potential risks.

Work independently or as part of a team producing equally successful product.


EDUCATION

  • Technical degree or relevant experience
  • Cybersecurity experience is a plus
  • Demonstrated product or program management experience
  • 3+ years leading product or program management

 

TECHNOLOGY & SOFTWARE SKILL SET

  • Proficient in Microsoft 365 products
  • Proficient in Microsoft Project
  • Interested in product management technologies

 

WORK ENVIRONMENT

This position is located in Reston, VA. Regardless of work location, the position requires a professional work environment and candidate must be able to meet the physical demands associated with the professional environment. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

FS-ISAC has reviewed this position description to ensure that essential functions and basic duties have been included. It is not intended to be construed as an exhaustive list of all functions, responsibilities, skills and abilities. Additional functions and requirements may be assigned by supervisors as deemed appropriate.

 


 

Financial Services Information Sharing and Analysis Center (FS-ISAC)

Position: Sales Coordinator

Job Status: Full Time                                                                        FLSA Status: Exempt

Reports To: SVP of Sales and Marketing                                         Position Supervised: NA

Work Schedule: Mon - Fri, 40 hours                                                Travel Required: Occasional

 

POSITION SUMMARY

The mission of the Financial Services Information Sharing and Analysis Center (FS-ISAC) is to help assure the resilience and continuity of the global financial services infrastructure and individual firms against acts that could significantly impact the sector's ability to provide services critical to the orderly functioning of the global economy.

This position is responsible for all activities required to support the sales team. The candidate for this position will have strong Salesforce and Microsoft Office 365 experience, business writing, project coordination skills and sales research experience. This position manages projects; forms and campaigns; prepares team for calls, noting actions and initiating follow up; and prepares documents to close the sale. Must be a go-getter with keen attention to detail, disciplined in data integrity and able to function in a fast-paced environment.

 

ESSENTIAL FUNCTIONS

 

Provide sales coordination for financial institution membership, Affiliate Partner Program and provide project coordination support for Affiliate partner products.

Data entry in Salesforce.

Create and utilize Salesforce reports and list pulls to support meetings and marketing.

Schedule and manage Sales team calls and meetings – remote and in-person.

Take detailed and relevant meeting notes and add to Salesforce in a timely manner.

Draft follow up response with appropriate documents to close the sale.

Participate in weekly pipeline calls as requested to update progress.

Manage multiple project trackers and forms.

Coordinate outreach campaigns (email and Pardot) to support sales team.

Research lead lists to identify and vet potential prospects.

 

POSITION QUALIFICATIONS AND COMPETENCIES

Business acumen - Understand business implications of sales and marketing activities.

Strong interpersonal skills - Interact with individuals from a variety of backgrounds and experience.

Business writing – Ability to clearly articulate FS-ISAC value in writing.

Active listening - Listens to colleagues, members, prospects and clarify discussions as needed. 

Problem solver - Independently identify potential problems; effectively communicate or elevate issues.

Professional demeanor – Self-motivated; responsible and disciplined; strong team orientation.

Quality management - Detail-oriented; consistently turns in high-quality work without close supervision.

 

EDUCATION

  • Bachelors’ degree in marketing, sales, business administration or related field (or experience to commensurate).

 

EXPERIENCE

  • Minimum of three years of sales experience or customer service.
  • Experience in the financial sector or Information security sector desirable.

 

TECHNOLOGY APPLICATIONS

  • Proficient in Salesforce; experience with Pardot desirable.
  • Experience in GoToWebinar or other virtual meeting platforms.
  • Proficient in MS Office365 applications including One Drive, Outlook, Word, Excel, Skype and PowerPoint.

 


 

Financial Services Information Sharing and Analysis Center (FS-ISAC)

Position: Senior intelligence Analyst (APAC)

Job Status: Full Time                                                                         FLSA Status: Exempt

Reports To: Intelligence Officer APAC                                            Location: Singapore

Work Schedule: Normal Office Hours                                              Travel Required: 10-15%

 

POSITION SUMMARY

The Financial Services Information Sharing and Analysis Center (FS-ISAC) is a member-owned, non-profit entity with thousands of members worldwide focused on building resiliency in the industry through the concept of mutual defense.  The FSISAC shares threat and vulnerability information, conducts coordinated exercises, manages rapid response communications for both cyber and physical events, conducts education and training programs, and fosters collaboration with other key industries and the public sector.  This position will serve as the Intelligence Analyst (IA) for the geographic region covering Asia-Pacific.

 

ESSENTIAL FUNCTIONS 

Provide real-time information to members on threats to the sector and incident reporting, in accordance with FS-ISAC classification and handling protocols.

Conduct technical research and analysis for written products in coordination with the firm’s intelligence strategy.

Conduct multiple-source intelligence analysis on current and emerging threats using advanced research methods and analytical techniques for finished intelligence products in coordination with the firm’s intelligence strategy;
Support regional threat discussions with members.

Support in-person member meetings as needed;

Participate in continuous information security skills development/training.

 

POSITION QUALIFICATIONS 

Intelligence Skills – Has experience with the most aspects of the intelligence cycle, including identifying key collection sources, evaluating raw intelligence, conducting research, performing link analysis and preparing finished intelligence for different levels of stakeholders.

Communication Skills – Has effective oral and written communications skills with the ability to compose finished intelligence reports and briefings in a timely, concise and accurate manner in accordance with intelligence analysis skills.

Critical Thinking Skills – Is able to approach information and data in an objective and rational manner, understand bias and possible relationships of importance, and apply methods of examination to construct a clear and informed judgement.

Organizational Skills – Possesses strong time management skills to work multiple products at the same time and to a high degree of quality.

 
REQUIRED BACKGROUND EXPERIENCE  

  • Bachelor’s degree, 8-10 years of experience in in cyber security analysis or incident response.
  • One or more of relevant certifications:  Security+, Network+, CCNA, CISSP, and CEH.
  • Broad knowledge/experience in cyber security technology, techniques and practices - intrusion monitoring, vulnerability analysis, web application security, incident response, malware analysis, threat research, or intelligence analysis.
  • Working knowledge of the financial or merchant services community, including missions, strengths and weaknesses.
  • Familiarity with Global cyber security programs and supporting organizations, including law enforcement agencies and associations.

 

DESIRED SKILLS  

  • Master’s degree or higher-level education in intelligence and/or cybersecurity.
  • Previous experience conducting static, dynamic and reverse engineering malware analysis.
  • Significant previous experience working with law enforcement and intelligence communities.
  • Advanced understand of the methods used by cyber-criminals and state sponsored organizations to hide themselves on the Internet, how cyber-criminals conduct online business and what are the various market places and forums they operate within.
  • Understanding of the “dark web” and underground cybercrime ecosystems and possess knowledge of navigating through cryptocurrency exchanges.

 
SECURITY CLEARANCES

  • Not required for APAC position

Please note: this position is for local applicants only. Relocation will not be sponsored by FS-ISAC. 

 


 

Global Resilience Federation (GRF)

Position: Tactical Threat Intelligence Analyst

Job Status: Full Time                                                                         FLSA Status: Exempt

Reports To: Intelligience Team Manager                                          Positions Supervised: N/A

Work Schedule: Normal Office Hours                                              Travel Required: N/A

 

BACKGROUND

The mission of the Global Resilience Federation (GRF) is to help assure the resilience and continuity of vital infrastructure and individual organizations against threats and acts that could significantly impact individual organizations and various sectors’ ability to provide services critical to the orderly functioning of the global economy. GRF is a non-profit spin-off from the Financial Services Information Sharing and Analysis Center (FS- ISAC) that provides support and technology to ISACs, ISAOs, and other communities around the world, with co- located analysts supporting individual communities and participating in cross-sector sharing and collaboration.

 

JOB DESCRIPTION

The Global Resilience Federation (GRF) is looking for a Tactical Threat Intelligence Analyst in Reston, VA.

 

ESSENTIAL FUNCTIONS 

Leverage understanding of tactics, techniques and procedures associated with advanced threats to create and add custom signatures that mitigate highly dynamic threats to the enterprise.

Provide retail sector organizations with actionable intelligence and serve as the tactical dissemination hub for the retail community.

Work with industry partners to gather and share intelligence. Apply intelligence to member attack vectors and systems to proactively identify potential cyber threats.

Identify and evaluate new sources of intelligence and integrate numerous types of cyber security data sources into cyber threat analysis products.

Support the development and execution of custom scripts to identify host-based indicators of compromise.

Proactively research emerging cyber threats. Apply analytical understanding of attacker methodologies and tactics, system vulnerabilities, and key indicators of attacks and exploits.

Produce tactical threat intelligence reports and briefings, that provide situational awareness of cyber threats impacting the retail community and member organizations.

Support threat hunt operations for members using known adversary tactics, techniques and procedures, as well as indicators of attack, in order to detect advanced threats to member organizations.

Ensure timely response to deadlines and administrative actions.

Collaborate using information and knowledge sharing networks and professional relationships to achieve common goals.

Stay abreast of world-wide events that are indicators of developing trends for situational awareness.

Mentor and guide less experienced CTI team members.


 

POSITION QUALIFICATIONS

Experience performing "deep dive" analysis and correlation of log data from multiple sources including PCAP and forensic artifacts.

Experience with incident response activities involving threat actors and working ongoing pervasive intrusion sets.

Experience with vulnerability research, exploit and/or malware investigation.

A deep understanding of advanced cyber threats targeting enterprises, along with the tools, tactics, and procedures used by those threats.

Understanding of behavioral based threat models, including ATT&CK, Cyber Kill Chain, Diamond Model, etc.

Experience with Threat Intel Platforms and SIEM-type platforms.

Capable and comfortable communicating actionable threat intelligence to both technical and operational-level stakeholders.

Familiarity with common languages (like Perl and Python) to parse logs, automate processes, and integrate systems.

Ability to analyze network packet captures (PCAPs), IP addresses, triage binaries and files, and incidents.

Ability to write and understand YARA and SNORT rules.

 

EDUCATION

  • Bachelor’s degree in a technical field or equivalent combination of education and experience.
  • Background and Experience Basic Cybersecurity Certifications (Security+, CEH, GCIH, etc.)
  • REQUIRED 3 - 5 years of relevant experience with at least 2 years of Threat Intelligence related experience.
  • Previous experience as Threat Researcher and/or Intelligence Analyst preferred.

 

WORK ENVIRONMENT

This position is performed in an office work environment with physical demands associated with that environment. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.