Senior Technical Security Risk Specialist
Core
Lead security risk assessments across technology, infrastructure, physical environments, and third-party services to evaluate threats, control weaknesses, and business impacts.
Role type
Senior Technical Security Risk Specialist
Builds
Risk assessment methods, remediation plans, reporting workflows, and risk information in ServiceNow IRM
Domain
Enterprise cybersecurity, cloud infrastructure, physical security, third-party risk management
Required skills
Cybersecurity expertise, security risk assessment, exception handling, technical control evaluation, cloud infrastructure knowledge (AWS, Azure), network security, identity management, endpoint security, physical security risk assessment, security frameworks (NIST CSF, NIST SP 800-53, ISO 27001), GRC platforms (ServiceNow IRM)
Preferred skills
CISSP, CCSP, CRISC, CISM certifications, data center/laboratory security assessment experience, AI/automation for GRC processes
Technologies
AWS, Microsoft Azure, ServiceNow IRM, NIST CSF, NIST SP 800-53, ISO 27001
Responsibilities
Lead security risk assessments across technology, infrastructure, physical environments, and third-party services; Assess security risks, issues, and exceptions recommending treatment options; Lead third-party security assessments examining supplier practices and controls; Guide engineering and business teams on security risks and solution evaluation; Develop and improve risk assessment methods, remediation plans, and reporting workflows
Seniority
Senior, hands-on IC
