Senior Security Assurance Analyst
Core
Conduct risk-based security assessments, third-party reviews, and control validations to protect organizational operations and enable business decisions.
Role type
Senior Security Assurance Analyst
Builds
Enterprise risk management posture and audit-ready security documentation
Domain
Cybersecurity, IT Audit, Third-Party Risk Management
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Security assessments, control evaluation, risk analysis, vendor security reviews, audit support, documentation, stakeholder communication, regulatory compliance, cloud security familiarity, GRC platform usage
Preferred skills
CISSP, CISA, CRISC, GIAC certifications, application security, identity and access management, data protection controls
Technologies
GRC platforms, workflow tools, ticketing systems, evidence management platforms
Responsibilities
Perform security assessments of applications, systems, cloud services, and third-party solutions; Evaluate security controls and identify risks and gaps; Develop risk-based recommendations for business decisions; Document findings and risk decisions; Review vendor security questionnaires, SOC reports, and penetration testing results; Partner with Procurement, Legal, and business teams to resolve security concerns; Assist with internal, external, and client assurance audits; Present findings to technical and non-technical audiences; Contribute to enhancing security assessment processes and standards
