EDX is seeking a full-time Information Security and Technology Associate to join our Information Security team. This role is focused on supporting security operations, access management, risk management, compliance initiatives, and core IT operations. The successful candidate will work closely with Information Security, Compliance, Infrastructure, and Engineering teams to help maintain secure, reliable systems and strengthen EDX’s security posture. This role reports to the CISO.

EDX is a digital assets marketplace and clearinghouse created in collaboration between US retail wealth managers and market makers for secure and compliant trading and clearing of digital assets, which is bringing best practices from existing markets to crypto (e.g., segregation of duties to reduce conflicts of interest between a market maker and an exchange) while mitigating the conflicts of interest in current digital asset markets.

Responsibilities:

• Assist with security monitoring, alert investigation, incident response, containment, remediation follow-up, and post-incident reviews
• Support vulnerability tracking and remediation workflows, including triage of scan findings and evidence collection
• Support SOC 1, SOC 2, ISO 27001, and other applicable regulatory frameworks through control execution, documentation, and evidence collection
• Contribute to vendor risk assessments, internal audits, remediation tracking, and supporting documentation such as SOPs, runbooks, and incident playbooks
• Provision and deprovision access across systems in alignment with least-privilege principles, including support for IAM initiatives and periodic access reviews
• Serve as Tier 1 on-call support during a weekly rotation, handling initial triage, escalation, and handoff for off-hours IT and security issues
• Serve as the primary point of contact for internal IT requests, supporting core IT operations and help desk activities
• Triage, prioritize, resolve, and escalate IT issues while delivering a consistent, high-quality employee support experience
• Maintain and improve IT service management workflows using Jira Service Management
• Maintain asset inventory and lifecycle tracking for endpoints and mobile devices, including enrollment, configuration, patching, and support for macOS and iOS devices
• Coordinate patch management across workstations, mobile devices, office network appliances, and endpoint applications
• Identify opportunities to automate, standardize, and scale IT and security operations
  
  

Experience:

• Minimum 1 year of experience in IT support, systems administration, security operations, or a related role
• Exposure to security operations, incident response, alert investigation, vulnerability remediation, or compliance support
• Hands-on experience with identity and access management, including onboarding, offboarding, access provisioning, and deprovisioning workflows
• Experience supporting IT help desk operations, ticket triage, escalation, and user support workflows
• Experience with endpoint management, SaaS platforms, and asset lifecycle support
• Familiarity with endpoint enrollment, configuration, patching, and device support, particularly in macOS and iOS environments
• Ability to follow documented runbooks, escalation paths, SOPs, and operational procedures
• Strong written documentation skills for procedures, control evidence, incident notes, and process improvements
• Interest in growing within cybersecurity, security operations, risk management, or compliance
  
  

Nice to Have:

• Hands-on familiarity with security, IAM, endpoint, observability, and IT service management tools such as CrowdStrike, Okta, Jamf, Datadog, Microsoft 365, and Jira Service Management
• Exposure to EDR, SIEM, vulnerability scanners, and other security monitoring platforms
• Exposure to security, audit, or regulatory frameworks such as SOC 1, SOC 2, ISO 27001, OCC, FFIEC, MAS TRM, or similar standards
• Exposure to cloud security or cloud administration concepts in AWS, Azure, or GCP
• Basic scripting or automation experience using Python, Bash, PowerShell, or similar tools
• Certifications or active pursuit of certifications such as Security+, SSCP, AWS Cloud Practitioner, or ITIL Foundation
• Experience in regulated financial services, digital assets, or other security-conscious environments