Lead Security Analyst - Risk

Bachelor’s degree in computer science, Information Security, Risk Management, or related field.

8+ years of experience in performing security risk assessment, vendor risk assessment, or information security risk analysis, preferably in a senior or lead role.

In-depth knowledge of security frameworks, standards, and regulations such as ISO 27001, NIST, GDPR, CCPA, etc.

Strong understanding of information security principles, practices, and technologies.

Demonstrated knowledge of relevant privacy and data protection regulations, as well as familiarity with industry standards for security and risk management.

Experience in conducting risk assessments, vulnerability assessments, and penetration testing of third-party systems and networks.

Ability to perform risk quantification (FAIR or equivalent), including estimating likelihood, impact, and loss exposure, is highly desired.

Familiarity with security tools and technologies used for third-party risk management, such as GRC platforms, Process Unity, vulnerability scanners, and risk assessment tools.

Experience with Vulnerability management, threat intelligence, fraud, physical security, cloud, application security/SDLC or emerging tech is a plus.

Excellent analytical and problem-solving skills, with the ability to assess and prioritize risks effectively.