Senior Security Risk Management Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Conduct comprehensive security risk assessments from start to finish, which includes defining scope, gathering data, analyzing information, documenting findings, and communicating with stakeholders.

• Create and enhance risk assessment templates, workflows, and procedural guides.

• Maintain risk registers and monitor risks through their mitigation, remediation, or acceptance processes.

• Develop and oversee Key Risk Indicator tracking and generate risk reporting outputs.

• Convert raw risk data into understandable deliverables for senior leadership.

• Collaborate with Vulnerability Management, Application Security, and the Blue Team to collect risk-relevant data.

• Identify opportunities to optimize and automate risk processes, and present recommendations to program leadership.

• Document and uphold standards, procedures, and guidance for the risk program.

• Work in partnership with Compliance, Internal Audit, Engineering, and Legal to contextualize and act on risk findings.

• Assist with audit readiness and risk-related reporting.

• Report directly to the Senior Manager of Security Risk Management.

⛳️ Requirements

• Over 5 years of experience in information security risk management, cybersecurity governance, or GRC.

• Practical experience in executing information security risk assessments from end to end, which includes scoping, data gathering, analysis, documentation of findings, and communication of results.

• Strong familiarity with NIST CSF, ISO 27005, PCI DSS, or DoCRA.

• Proven ability to develop repeatable, structured, and scalable processes.

• Strong skills in data analysis, including cleaning, interpreting, and presenting risk data.

• Experience in contributing to KRI tracking and risk reporting for internal stakeholders.

• Knowledge of AuditBoard, Archer, OneTrust, or ServiceNow GRC is preferred.

• Proficient in Google Workspace.

• Experience with SQL and/or Tableau is a significant advantage.

• Excellent written communication skills.

• Self-motivated and capable of working in ambiguous situations.

• Bachelor's degree or higher in IT, Cybersecurity, Business Administration, Engineering, or a related field.

• CISM, CRISC, or ISO 27001 certifications are a plus.

• Experience in fintech or regulated industries is preferred.

• Applicants must select a city and country for their work location.

• Applicants must indicate if they require sponsorship to work in their chosen location.

🏝️ Benefits

• Equity.

• Bonus program.

• Wellness allowance.

• Medical insurance.

• Dental insurance.

• Vision insurance.

• 401(k).

• Remote work options.

• A global and diverse workplace.

• Consistent application of job-related skills or work-style assessments across all candidates.