Senior Security Risk Analyst

This is a fully remote position, open to applicants in Alabama, +25 more states.

📋 Description

• Oversee security risk evaluations throughout the organization, identifying, analyzing, and prioritizing risks within engineering, IT, operations, and business functions.

• Maintain a risk register and provide leadership with a clear and up-to-date perspective on Muon's risk posture.

• Collaborate with various teams across the organization to facilitate the remediation of identified risks and ensure they are tracked to resolution.

• Evaluate the security risks associated with new tools, vendors, third parties, and changes in architecture or processes prior to their adoption.

• Establish and implement a consistent risk framework and methodology, which includes likelihood and impact scoring, risk acceptance, and handling exceptions.

• Align risks and controls with compliance requirements such as NIST 800-171 and CMMC, and assist in audits and assessments.

• Provide leadership with reports on risk trends and metrics, and suggest areas for investment to mitigate the highest risks.

• Support teams in developing risk-aware processes and encourage them to take responsibility for the risks they manage.

⛳️ Requirements

• A minimum of 5 years of experience in information security, security engineering, or security risk/GRC roles.

• Practical experience in conducting security risk assessments and managing a risk register.

• Strong knowledge of security risk frameworks and methodologies, such as NIST RMF / 800-30, FAIR, or equivalent.

• Familiarity with compliance frameworks like NIST 800-171, CMMC, SOC 2, or ISO 27001.

• Exceptional written and verbal communication skills, capable of articulating risk and priorities to both technical teams and leadership.

• Relevant certifications such as CISSP, CRISC, CISA, or similar are preferred.

• Experience in environments subject to ITAR/EAR export control requirements is advantageous.

• Must qualify to access export-controlled information in accordance with applicable U.S. Government export regulations as a U.S. person, without needing export authorization, or through eligibility and a reasonable likelihood of obtaining necessary export authorization.

• Muon is authorized to hire in the following states: Alabama, Arizona, California, Colorado, Connecticut, District of Columbia, Florida, Georgia, Illinois, Iowa, Idaho, Maryland, Massachusetts, Michigan, Minnesota, Missouri, New Jersey, New York, North Carolina, Ohio, Oregon, Pennsylvania, Tennessee, Texas, Vermont, Virginia, or Washington.

🏝️ Benefits

• Competitive equity grant.

• Medical insurance.

• Dental insurance.

• Vision insurance.

• 401k retirement plan.

• Short-term disability insurance.

• Long-term disability insurance.

• Life insurance.

• Three weeks of paid vacation for new employees.

• 12 paid holidays.

• Unlimited sick time.

• Paid parental leave.