Senior Security Risk Analyst

Job Summary

To support the maturation of a comprehensive Security Risk Management program, the full-time Senior Security Risk Analyst will conduct risk assessments, develop scalable workflows, and maintain risk registers while working remotely.

Key responsibilities

• Execute end-to-end security risk assessments, including scoping, data gathering, analysis, and stakeholder communication
• Support the development of risk assessment templates and workflows to ensure program consistency and scalability
• Maintain risk registers and track identified risks through mitigation, remediation, or acceptance workflows

Required qualifications

• 5+ years of experience in information security risk management or cybersecurity governance
• Hands-on experience conducting risk assessments and managing findings documentation
• Strong knowledge of risk management frameworks such as NIST CSF, ISO 27005, or PCI DSS
• Bachelor's degree or above in IT, Cybersecurity, Business Administration, Engineering, or a related field
• Familiarity with GRC tools such as AuditBoard, Archer, or ServiceNow GRC