Senior Security Analyst, Security Risk Management
Core
Senior Security Analyst leading end-to-end security risk assessments, integrating security risk into enterprise risk management, and producing executive/board reporting.
Role type
Senior Security Analyst (Security Risk Management)
Builds
Security risk registers, quarterly risk reports, and executive/board risk narratives.
Domain
Financial Technology / Cybersecurity Risk Management
Deliverable
dashboards & analysis
Required skills
Scenario-based risk analysis (NIST SP 800-30, FAIR), Enterprise Risk Management (ERM) integration, Risk reporting and executive communication, NIST 800-53/CSF/ISO 27001/SOC 2 knowledge, AI/automation tooling
Preferred skills
FedRAMP 20x experience, Security Decision Record reporting
Technologies
NIST SP 800-30, FAIR, NIST 800-53, NIST CSF, ISO 27001, SOC 2
Responsibilities
Run security risk assessments (intake, analysis, treatment decisions), Build quarterly risk reporting for leadership, Integrate security risk into enterprise risk management, Mature the risk program framework and KIs, Support FedRAMP 20x risk decisions, Scale program through AI and automation
Seniority
Senior, hands-on IC
