Cyber Risk Analyst

At BBH we value diverse backgrounds, so if your experience looks a little different from what we've outlined and you think you can bring value to the role, we will still welcome your application!

What You Can Expect At BBH:

If you join BBH you will find a collaborative environment that enables you to step outside your role to add value wherever you can. You will have direct access to clients, information and experts across all business areas around the world. BBH will provide you with opportunities to grow your expertise, take on new challenges, and reinvent yourself—without leaving the firm. We encourage a culture of inclusion that values each employee’s unique perspective. We provide a high-quality benefits program emphasizing good health, financial security, and peace of mind. Ultimately we want you to have rewarding work with the flexibility to enjoy personal and family experiences at every career stage. Our BBH Cares program offers volunteer opportunities to give back to your community and help transform the lives of others.

Position Summary:

The Cyber Incident Management Analyst is a designated full-time resource responsible for working with stakeholders throughout the Firm to support cyber incident response and security awareness efforts on a global basis.  In this multifaceted role you will have a unique opportunity to protect the Firm while learning and working across all lines of business to develop incident response playbooks, communication, and escalation plans, and facilitate a variety of security awareness initiatives.

Responsibilities:

Planning & Organization

• Develop and conduct continually maturing simulations and awareness initiatives in support of the Firm’s Social Engineering Program which includes phishing and vishing.
• Develop and conduct continually maturing simulations/tabletop exercises of cyber incident response scenarios.  Clearly document in writing and effectively communicate the findings and recommendations and develop a plan for closing them.
• Assist with continual enhancement to established policies, playbooks, and incident response procedures, as well as the creation of new scenarios
• Assist in enhancing program metrics and executive reporting.
• Participate in the development, implementation and maintenance of cyber business resiliency plans ensuring they are in line with the overall business continuity plan.
• Assist in ad-hoc projects as needed

Event Management & Incident Response

• Provide cyber incident response and, at times lead the Incident Response to ensure timely escalation and communications to include coordinating status calls, providing clear concise updates to the business heads, and assisting with implementation of cyber response plans
• Collaborate closely with the Cybersecurity teams when responding to cyber incidents/events
• Maintain coordination and communication streams horizontally and vertically as part of major incident handling
• Draft incident communications, both for internal and external audiences, and provide status updates on the EIM Intranet portal pages
• Monitor security and vulnerability news and alerts to rapidly identify events affecting or potentially affecting our business, escalating to relevant management
• Translate technology issues into layman terms in support of internal and external communications. 

Relationship Management

• Build relationships with key stakeholders to enhance the EIM program within BBH
• Serve as an escalation point of contact for EIM requests and inquiries to ensure a timely response to business and employee needs
• Collaborate with key business stakeholders, senior management, and various department leaders to understand and define their critical processes, provide guidance and direction on incident response, and conduct business impact assessments
• Assist with supporting external client engagements with timely completion of due diligence questionnaires and providing client presentations during due diligence visits

Qualifications:

• Bachelor’s degree or equivalent work experience
• Strong verbal and written communication skills to coordinate efficiently and effectively with business partners of various levels including executive management
• Ability to establish effective relationships through strong listening skills with an authentic desire to be curious
• Business knowledge of BBH core critical functions such as custody, infomediary, service delivery, and fund accounting/admin a plus
• Proficient/Knowledgeable or demonstrated interest in cybersecurity, incident management, vendor risk management, and business continuity a plus
• Understanding of relevant regulatory frameworks for cybersecurity a plus
• Experienc