Sr. Associate, Information Security & AI Governance Analyst

This role supports the VP of Integration & Information Security (ISO) in managing information security, cybersecurity, and AI governance for Lido Advisors, LLC and its affiliated entities, which operate under multiple state and federal regulators. It helps execute the firm's security strategy, supports enterprise AI adoption, and assists with investigations and digital forensics for Legal and Compliance.

• Information Security & Cybersecurity

Assists the ISO in identifying, prioritizing, and executing security initiatives across all entities.

Strategy and roadmap

Help develop and maintain the multi-year cybersecurity strategy and roadmap, aligned to business priorities and NIST CSF.

Posture and reporting

Track security posture improvements; prepare risk, program status, and metrics reporting for the ISO, executive leadership, and the Board.

Policy

Draft, update, and maintain information security and cybersecurity policies and standards for each entity.

Third-party risk

Perform vendor and third-party risk management tasks, including due diligence, risk ratings, and ongoing monitoring.

Technology reviews

Conduct security reviews of new platforms, applications, and technologies and present findings to the ISO.

Awareness and training

Administer cybersecurity awareness, phishing simulation, and training programs for all staff.

MSP oversight

Monitor services delivered by the managed service provider (Align), including SLAs, controls, and open issues, and escalate to the ISO.

• AI Governance & Enterprise AI Enablement

Supports the ISO in coordinating the firm's AI adoption.

Rollout planning

Help plan and manage the Claude Enterprise rollout, including phasing, onboarding, and adoption tracking.

AI policy

Help draft and maintain AI use policies, standards, and acceptable-use guidance.

Usage governance

Track AI use cases and approvals and monitor how AI tools are used.

Education and training

Help create and deliver user training on safe, effective, and compliant AI use.

Access controls

Administer AI access controls, permissions, and data-handling safeguards.

Operating model

Support design and upkeep of the enterprise AI operating model, including roles, decision rights, and intake processes.

Vendor evaluation

Assess AI vendors and platforms for security, privacy, regulatory, and business fit, and present findings to the ISO.

• Investigations, Insider Risk & Digital Forensics

Assists the ISO with forensic and investigative activities in support of Legal, Compliance, and HR.

Insider risk

Assist with insider-risk investigations, including reviews tied to employee departures.

Data exfiltration

Review user activity and file movement for evidence of data exfiltration.

Evidence collection

Collect and preserve forensic evidence with documented chain of custody.

Employee investigations

Provide technical investigation support for employee-related matters.

Litigation support

Help prepare technical findings, data preservation, and evidence for Legal.

IP-address analysis

Analyze IP addresses, sign-in activity, and access patterns to establish user activity.

Event reconstruction

Reconstruct security events and incident timelines from logs and system data.

• 3+ years in Information Security.
• Exposure to third-party risk assessments or working with managed service providers.
• Hands-on experience with digital forensics, insider-risk investigations, and evidence handling in Microsoft 365 and cloud file platforms.
• Interest in AI governance; experience supporting technology or AI rollouts a plus.
• Clear written and verbal communication, including summarizing technical findings for non-technical audiences.
• Relevant certifications are preferred, such as CC, Sec +, CySA +, SSCP, GCFA.

Nice-to-have

Experience in Financial services or another regulated industry, working knowledge of SEC requirements for investment advisers (including Regulation S-P) and frameworks such as NIST CSF, NIST AI RMF, and ISO/IEC 42001

Key Relationships

Compliance, Legal, Technology, HR, Advisors and business leaders, executive leadership and the Board, the managed service provider, and external partners such as vendors, auditors, and outside counsel.

Lido Advisors is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other protected characteristic.

#LI-JM1