Senior Cybersecurity Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Perform cyber risk assessments pertaining to enterprise activities and operational choices.

• Identify potential risks affecting the confidentiality, integrity, and availability of enterprise systems and data.

• Communicate cyber risks to business and technical leadership in terms that are ready for decision-making, aligned with the enterprise's risk appetite.

• Oversee third-party cyber risk assessments, temporary risk acceptance evaluations, software risk analyses, and monitor AI development related to cyber risk.

• Collaborate with Compliance to ensure consistent risk treatment across various frameworks.

• Assess cyber risks in networking, cloud, endpoint, and identity and access management architectures.

• Determine necessary risk mitigation when residual risk surpasses the enterprise's appetite.

• Provide insights on risk posture to influence enterprise scoping and architectural decisions.

• Enhance the Cyber Governance, Risk & Compliance (GR&C) assessment methodology, intake processes, risk articulation standards, evidence management, and consistency in risk evaluations.

• Stay up-to-date with current knowledge of cyber risks, threats, technologies, and regulations.

• Be prepared to travel up to 25 percent and undertake other assigned responsibilities.

⛳️ Requirements

• Generally, 8 years of direct cybersecurity experience with a Bachelor's degree in Computer Science, Information Systems, or a related field, or 4 years with a Master's degree.

• Proven experience in enterprise risk management and third-party or vendor cyber risk evaluation.

• Current Security+ certification or an equivalent industry credential.

• Must be a U.S. Citizen.

• Must reside within the United States to work remotely.

• Capacity to identify cyber risks in networking, cloud, endpoint, and identity and access management technologies.

• Familiarity with NIST publications.

• Excellent written and verbal communication skills, including the ability to convey technical risk to non-technical audiences.

• Capability to work independently on ambiguous issues with minimal guidance.

• Willingness to travel up to 25 percent.

• Preferred qualifications: CISSP, CySA+, Microsoft SC-300, Microsoft Azure/Microsoft 365, Azure Government (GCC High), Entra ID, B2B and external identity management, conditional access, privileged access, experience in U.S. Federal or Defense Industrial Base environments, CMMC, NIST SP 800-171/172, DFARS, UK Cyber Essentials, Australian Essential Eight, UK GDPR, EU NIS2, ISO/IEC 27001, and operational process improvement in GR&C.

• A Bachelor's degree is preferred; however, equivalent experience is acceptable if a degree is not held.

🏝️ Benefits

• Health, dental, and vision insurance.

• Paid time off and holidays.

• Retirement benefits, including 401(k) matching.

• Educational reimbursement.

• Parental leave.

• Employee stock purchase plan.

• Tax-saving options.

• Disability and life insurance.

• Pet insurance.