{"id":2466357,"url":"https://alion.io/job/hightower-signature-wealth-cybersecurity-associate","title":"Cybersecurity Associate","company":{"id":2571173,"name":"Hightower Signature Wealth","domain":"hightowersignature.com","url":"https://alion.io/company/hightowersignature","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Dayforce","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Chicago, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":70000,"max":null,"currency":"USD","period":"year","gross":null,"usd_annual":70000},"salary_estimate":null,"experience_years_min":1,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"NIST 800-53","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-09-25T05:00:00Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-23T12:54:15Z","board_verified":true,"closed_at":null,"days_open":28,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":28},"description":"Our Story\nFounded in 2008, Hightower is a wealth management firm that provides investment, financial and retirement planning services to individuals, foundations and family offices, as well as 401(k) consulting and cash management services to corporations. Hightower’s capital solutions, operational support services, size and scale empower its vibrant community of independent-minded wealth advisors to grow their businesses and help their clients achieve their financial vision. Based in Chicago with advisors across the U.S., we operate as a registered investment advisor (RIA).\n\nYour Future Team \nHightower’s Cybersecurity team delivers exceptional service by securing the company’s information assets, developing and implementing robust security procedures, and ensuring compliance with industry regulations. You will collaborate with cross-functional teams, managed service providers, vendors, and business stakeholders to protect the organization's information assets and strengthen its overall security posture. Responsibilities include supporting security investigations, conducting cybersecurity and vendor risk assessments, maintaining the cybersecurity risk register, tracking remediation activities, assisting with audits and compliance initiatives, and preparing risk and security reporting for management.\n\nAdditionally, you will participate in security reviews of new technologies, applications, and business initiatives, support security awareness efforts, and help ensure the effective implementation and maintenance of cybersecurity governance, risk, and compliance programs. This position involves regular interaction with internal stakeholders and external partners to promote a strong culture of cybersecurity risk management across the organization.\n\nWhat You’ll Do \nCybersecurity Risk Management\nConduct cybersecurity risk assessments to identify and evaluate risks to the organization's information assets and business operations, document assessment results, and track risk mitigation efforts through remediation or formal risk acceptance.\nMonitor remediation activities and collaborate with stakeholders to ensure timely mitigation of identified risks.\nAssist with risk exception and risk acceptance processes, including documentation and management approvals.\nMonitor cybersecurity risk metrics and key performance indicators and prepare reports for management and leadership.\nCollaborate with cross-functional teams to promote effective cybersecurity risk management practices across the organization.\nParticipate in security reviews for new technologies, applications, cloud services, and business initiatives to identify and mitigate potential risks.\nThird-Party Risk Management\nConduct third-party and vendor cybersecurity risk assessments to evaluate security controls and identify potential risks to the organization.\nSupport vendor due diligence, onboarding reviews, periodic reassessments, and ongoing risk monitoring activities.\nEvaluate vendor security documentation, including SOC reports, security questionnaires, penetration testing results, and other assurance artifacts.\nWork with internal stakeholders and external vendors to track remediation of identified security gaps and risks.\nLiaise with managed services providers, cloud vendors, and third parties to ensure their security practices align with the company's cybersecurity and risk management objectives.\nGovernance, Risk, and Compliance (GRC)\nAssist with the development, implementation, and maintenance of cybersecurity policies, standards, procedures, and governance initiatives.\nSupport internal and external audits by collecting evidence, coordinating stakeholder responses, and tracking corrective actions to completion.\nHelp ensure compliance with applicable regulatory requirements, industry standards, and cybersecurity frameworks.\nPrepare reports, dashboards, and presentations for leadership on cybersecurity risk, compliance, and third-party risk activities.\nInvestigations and Reporting\nConduct thorough investigations of suspicious activities that pose risks to the organization's information assets, collaborating with relevant teams and providing detailed reports to safeguard the company's security infrastructure.\nSecurity Incident Response\nEnsure the protection of critical systems and data by coordinating efforts to contain, mitigate, and resolve threats effectively.\nInvestigate security alerts and incidents that may impact the company's security landscape.\nEscalate issues to senior team members, when necessary, to ensure swift action and containment.\nSecurity Technology Management\nSupport the deployment, configuration, and maintenance of security tools and technologies across the organization, ensuring all systems align with established security protocols to protect the company's digital assets.\nSecurity Awareness and Training\nSupport security awareness training efforts to educate employees on cybersecurity best practices and promote a strong security culture across the organization.\n\nWhat You’ll Bring\nBachelor’s degree and Security+ or related certification\n1-2 years of experience in cybersecurity risk management, third-party risk management, security operations, or a related cybersecurity function.\nAbility to stay informed on emerging cybersecurity trends and threats to bolster the company’s security posture.\nAbility to collect, analyze, and interpret security, risk, and compliance data to support decision-making and risk management activities.\nStrong interpersonal and communications (written and oral) \nSelf-motivated individual who can operate with minimal supervision, \nAbility to think critically to effectively address and resolve IT security issues as they arise.\n\nPrefferred\nStrong organizational and project management skills with the ability to track multiple risk, remediation, and compliance initiatives simultaneously. \nExperience in financial services, wealth management, or other regulated industries.\nKnowledge of cybersecurity frameworks, standards, and regulatory requirements, including NIST Cybersecurity Framework (CSF), NIST 800-53, CIS Controls, ISO 27001, SOC 2, Gramm-Leach-Bliley Act (GLBA), SEC and FINRA regulations, and other applicable privacy and information security requirements.\n\nWhat We Offer\nCoverage on the first day of employment for medical, dental, and vision insurance\nPaid parental leave (16 weeks for primary caregiver and 8 weeks for secondary caregiver)\nMother’s lounge onsite\nFlexible PTO plan\nIn-office Monday through Thursday and work from home on Fridays\nFree brand-new gym in the Chicago office \n401k matching plan\nHSA employer contributions\nStudent loan assistance\nPet insurance\nBase salary of $70,000-$80,000 plus discretionary bonus (exact base salary amount will be dependent on experience)\n\nAN EQUAL OPPORTUNITY EMPLOYER: Hightower is an equal opportunity employer and does not discriminate based upon race, color, religion, sex, sexual orientation, pregnancy, marital status, national origin, citizenship, veteran status, ancestry, age (over 40), physical or mental disability, medical condition (cancer-related), gender identity or expression, genetic information including sickle cell or hemoglobin C trait, or any other consideration made unlawful by applicable federal, state, or local law.\n\nYou are a U.S. citizen, U.S. permanent resident or possess other unrestricted U.S. work authorization and will not require sponsorship for U.S. work authorization now or anytime in the future.","description_format":"text","description_chars":7491,"description_truncated":false,"requirements":{"experience_years_min":1,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Parental leave","Retirement plans","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Financial Services","Professional Services"],"lifecycle":[{"event":"open","at":"2026-10-13T18:47:27Z"}],"visa":[],"liveness":{"score":73,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.815,"p_room":0.9,"age_days":28,"expected_fill_days":45,"reasons":["conf:2","velocity","win:mid","comp:junior"],"computed_at":"2026-10-23T05:54:15Z"},"pay":{"stated_usd_annual":70000,"is_top_pay":false},"html_url":"https://alion.io/job/hightower-signature-wealth-cybersecurity-associate","json_url":"https://alion.io/job/hightower-signature-wealth-cybersecurity-associate.json","meta":{"generated_at":"2026-10-23T14:39:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21958,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2571173},"rest":"https://alion.io/mcp/rest/get_company?id=2571173"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhightower-signature-wealth-cybersecurity-associate"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhightower-signature-wealth-cybersecurity-associate"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhightower-signature-wealth-cybersecurity-associate"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hightower-signature-wealth-cybersecurity-associate\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhightower-signature-wealth-cybersecurity-associate"}]}