Sr. Associate, Information Security

Harrison Street Asset Management ("HSAM") is a leading global alternative investment management firm focused on real estate, infrastructure, and credit strategies across North America and Europe. Headquartered in Chicago, Toronto, and London with offices across North America, Europe, Asia and the Middle East, the firm has over $108 billion in assets under management on behalf of institutional investors and registered investment advisors globally.

Founded on a culture of innovation, HSAM is an early mover in alternative real estate and mid-market infrastructure. Today, the firm’s global team, consisting of more than 520 professionals, is committed to creating long-term value through deep sector expertise and forward-thinking strategies.

Under direction of the Director, Head of Information Security, Global CISO, the candidate will serve as a technical security resource on Harrison Street Asset Management’s (HSAM’s) cybersecurity team. This role is responsible for the hands-on configuration, administration, and oversight of HSAM’s cybersecurity tools and platforms, as well as supporting vulnerability management, SOC monitoring, technology security configuration reviews, and identity and access management operations. The candidate works cross-functionally and reports technical findings and recommendations to the CISO. This role requires strong attention to detail, initiative, accountability, and critical thinking skills.

Responsibilities

40%     Security Tool Administration & Technology Configuration Management

• Configure, tune, and manage HSAM’s cybersecurity toolset, including but not limited to endpoint detection and response (EDR), SIEM, vulnerability management, and data loss prevention (DLP) tools.
• Maintain and apply security policies and rules within cybersecurity platforms in alignment with HSAM standards and regulatory requirements.
• Conduct periodic security configuration reviews of technology systems and platforms against internal policies, industry best practices, and vendor hardening guidelines.
• Identify configuration gaps across technology systems, document findings, and coordinate with platform owners to remediate.
• Support a criticality-based review cadence for technology platform security configurations.
• Work cross-functionally to support security configuration needs and related enhancements.
• Support identity and access management (IAM) operations, including user access reviews, conditional access policy maintenance, and identity governance.
• Assist with the improvement of HSAM’s existing cybersecurity toolset and execute toolset enhancements, as appropriate

30%     Vulnerability Management & SOC / Monitoring Support

• Support vulnerability scanning operations, including scan execution, result triage, and remediation tracking.
• Assist with the management of patching cadence and remediation timelines, ensuring open findings are tracked to closure.
• Monitor SOC alerting and assist with tuning detection rules to reduce noise and improve signal quality.
• Assist with incident triage, investigation, and documentation under direction of the CISO.
• Help maintain and update incident response runbooks and playbooks.
• Assist with monitoring threats and taking preventative measures to protect HSAM’s environment.

20%     Security Program Technical Support

• Assist in maintaining a program aligned to applicable security standards, regulations, and industry best practices.
• Support the mitigation of information security risks within HSAM in a manner that meets compliance and regulatory requirements.
• Provide input to and assist with updates of policies, procedures, and other program-related documentation.
• Provide technical input into firmwide risk meetings and participate in security strategy meetings, as appropriate.
• Generate technical evidence and artifacts to support compliance audits and third-party assessments.
• Assist with technical writing, internal communications, and documentation related to security controls and configurations.

10%     Cross-Team Support & Professional Development

• Provide technical support for third-party assessments as needed.
• Attend meetings and serve on committees, as requested.
• Maintain and increase knowledge and skills through attendance at meetings, conferences, training seminars, and in-service training sessions.

Requirements

• 3-5 years of experience in information security with hands-on experience administering security tools and infrastructure in a regulated environment.
• Bachelor’s Degree in a technical discipline such as Information Security, Computer Science, Information Systems, or related field.
• Exp