Senior Security Risk Analyst

Job Summary

Leading the global risk management process, the full-time Senior Security Risk Analyst will assess risks, negotiate treatment plans, and manage policy exceptions while working remotely to support the organization's risk management program and enhance security controls.

Key responsibilities

• Conduct risk assessments and collaborate with risk and control owners to implement effective treatment plans
• Manage policy exceptions by developing compensatory controls or risk acceptance cases
• Own risk reporting for key areas, acting as the primary risk contact and driving measurable risk reduction

Required qualifications

• 4+ years of experience in security risk, GRC, or a related field
• Bachelor's degree in a technology-related field or an additional 4 years of relevant work experience
• Fluency in risk management frameworks, including the NIST Cybersecurity Framework (CSF)
• Ability to communicate technical risks effectively to both technical and non-technical audiences
• Experience in automating workflows or a strong interest in agentic AI workflows