Sr Risk Analyst
Core
Lead enterprise-wide cyber risk assessments, identify and mitigate risks across cloud infrastructure and third-party vendors, and provide executive-level reporting on the organization's cyber risk posture.
Role type
Senior Cyber Risk Analyst (Enterprise Security)
Builds
Enterprise risk registers, risk treatment plans, and executive risk dashboards
Domain
Cybersecurity / Enterprise Risk Management
Deliverable
dashboards & analysis
Required skills
Enterprise risk assessment, Cloud security risk (AWS/Azure/GCP), Third-party/vendor risk management, Risk frameworks (NIST CSF, ISO 27005, FAIR), Vulnerability management, Executive reporting, Compliance (SOC 2, ISO 27001, NIST, Sox)
Preferred skills
AI/ML governance, Security architecture, Incident response, Privacy regulations (GDPR, CCPA)
Technologies
AWS, Azure, GCP, NIST CSF, ISO 27005, FAIR, SOC 2, ISO 27001
Responsibilities
Lead comprehensive enterprise-wide cyber risk assessments, Develop and maintain enterprise risk registers, Assess security risks associated with cloud environments, Conduct cybersecurity risk assessments of third-party vendors, Prepare comprehensive cyber risk reports for executive leadership, Partner with engineering and security teams on strategic initiatives
Seniority
Senior, hands-on IC
