cybersecurity risk analyst

AAA The Auto Club Group

<div><p>It&rsquo;s a great time to join AAA The Auto Club Group!
</p><p></p><p><b>JOIN THE TEAM COMMITTED TO DRIVING YOUR CAREER FORWARD
</b></p><p></p><p><b>Job Type:
</b></p><p></p>Full time<br>
<p></p><div><div><p><b>Exempt/Non Exempt:<br>
</b></p></div></div><p></p>Salary
<p></p><p><b>Job Description:<br>
</b></p><p></p><br>
<br>
<p><b>IT Risk Analyst &ndash; The Auto Club Group
</b></p><p><b>What you will do:
</b></p><p>The IT Risk Analyst assists with the execution and maintenance of the IT risk management program, including the evaluation and mitigation of information technology risks across the organization and supporting leading risk teammates as needed.
</p><p>Primary Duties and Responsibilities:
</p><ul><li>Contribute to documentation of IT risk management policies, standards, and processes
</li><li>Help maintain alignment with company objectives and regulatory requirements
</li><li>Perform analysis of key IT Risk performance/risk indicators for management
</li><li>Support internal and external IT risk assessments as dictated by the senior team members
</li><li>Contribute to IT risk appetites, tolerances, and mitigation plans related to IT systems as dictated by the senior team members
</li><li>Support monitoring activities of 1st line access reviews for general users, privileged users, and passwords
</li><li>Coordinate with IT to maintain an IT risk register, control library, and assign risk ownership
</li><li>Support regulatory readiness efforts and governance assessments for the information technology controls environment
</li><li>Research industry trends, emerging threats, and evolving regulations
</li><li>Contribute to training company stakeholders on IT risk
</li><li>Contribute to Enterprise Risk Management team&rsquo;s reporting and processes (e.g. key risks, watch list risks, AI Systems Program)
</li></ul><p></p><p>Supervisory Responsibilities:
</p><p>None
</p><p></p><p><b>How you will benefit:
</b></p><p>IT Risk Analyst will earn a competitive salary of $65,000 - $80,000 annually with annual bonus potential based on performance.
</p><p>Excellent and comprehensive benefits packages are just another reason to work for the Auto Club Group. Benefits include:
</p><ul><li>401k Match
</li><li>Medical
</li><li>Dental
</li><li>Vision
</li><li>PTO
</li><li>Paid Holidays
</li><li>Tuition Reimbursement
</li></ul><p></p><p><b>We&rsquo;re looking for candidates who:
</b></p><p><b>Required Qualifications:
</b></p><p>Education:
</p><ul><li>Bachelor&rsquo;s degree in information technology, cybersecurity, risk management, computer science, or related area
</li></ul><p>Experience:
</p><ul><li>2-4 years of experience in IT risk management, IT audit, cybersecurity, or related roles
</li></ul><p>Knowledge of:
</p><ul><li>Familiarity with property/casualty insurance industry operations and relevant regulatory requirements (e.g. NAIC Model Law, PCI-DSS)
</li><li>Foundational knowledge of Internal controls and core IT technologies and processes (e.g. network systems, operating systems, databases, change control tools and processes, computer systems operations, application and system development, help desk and incident monitoring, information security, data backup, retention and recovery, IT vendor management, asset management, disaster recovery)
</li><li>Familiarity with risk assessment methodologies and GRC tools
</li></ul><p>Skills:
</p><ul><li>Good written and verbal communication skills
</li><li>Attention to detail with the ability to follow processes and standards
</li><li>Proficiency in Microsoft Office products
</li><li>Work collaboratively and manage competing priorities, especially when translating expectations between third line or external audit assurance groups and first line risk and controls owners within IT
</li><li>Ensure strong relationship management and value demonstration to a wide set of stakeholders
</li><li>Identify, assess, and prioritize IT risks
</li><li>Multitask and work closely and effectively with other employees
</li><li>High degree of attention to detail and organization
</li><li>Maintain a high volume of work with few mistakes or delays
</li></ul><p></p><p><b>Preferred Qualifications:
</b></p><p>Education:
</p><ul><li>Master&rsquo;s degree in Information Technology, Cybersecurity, Risk Management, Computer Science, or related area; MBA also considered
</li><li>One or more of the following professional certifications such as CISA, CISM, CRISC, or CISSP are strongly preferred
</li></ul><p></p><p>Prior Experience with:
</p><ul><li>IT risk frameworks (e.g. NIST CSF, COBIT) in the insurance or financial services industry
</li><li>IT systems and technologies including ServiceNow, Saviynt, Workday, SAP, Salesforce, Guidewire
</li><li>IT risk management for emerging technologies such as AI, machine learning, cloud computing, process automation, data analytics, etc.
</li></ul><p></p><p><b>Work Environment
</b></p><p><i>This is a hybrid work arrangement (time spent in office and remote). Depending on the employee's role and leadership's assessment, some employees will come in to an ACG facility on a weekly basis, a monthly basis, or on an &quot;as needed&quot; basis for key meetings and collaborative activities. Most employees will be required to come into the office, at a minimum, for important departmental meetings or team building events.
</i></p><p></p><p>Who We Are
</p><p>Become a part of something bigger.
</p><p></p><p>The Auto Club Group (ACG) provides membership, travel, insurance, and financial service offerings to approximately 14+ million members and customers across 14 states and 2 U.S. territories through AAA, Meemic, and Fremont brands. ACG belongs to the national AAA federation and is the second largest AAA club in North America.
</p><p></p><p>By continuing to invest in more advanced technology, pursuing innovative products, and hiring a highly skilled workforce, AAA continues to build upon its heritage of providing quality service and helping our members enjoy life&rsquo;s journey through insurance, travel, financial services, and roadside assistance.
</p><p></p><p>And when you join our team, one of the first things you&rsquo;ll notice is that same, whole-hearted, enthusiastic advocacy for each other.
</p><p></p><p>We have positions available for every walk of life! AAA prides itself on creating an inclusive and welcoming environment of diverse backgrounds, experiences, and viewpoints, realizing our differences make us stronger.
</p><p></p><p>To learn more about AAA The Auto Club Group visit www.aaa.com
</p><p></p><p>Important Note:
</p><p></p><p>ACG&rsquo;s Compensation philosophy is to provide a market-competitive structure of fair, equitable and performance-based pay to attract and retain excellent talent that will enable ACG to meet its short and long-term goals. ACG utilizes a geographic pay differential as part of the base salary compensation program. Pay ranges outlined in this posting are based on the various ranges within the geographic areas which ACG operates. Salary at time of offer is determined based on these and other factors as associated with the job and job level.
</p><p></p><p>The above statements describe the principal and essential functions, but not all functions that may be inherent in the job. This job requires the ability to perform duties contained in the job description for this position, including, but not limited to, the above requirements. Reasonable accommodations will be made for otherwise qualified applicants, as needed, to enable them to fulfill these requirements.
</p><p></p><p>The Auto Club Group, and all its affiliated companies, is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, disability or protected veteran status.
</p><p></p><p>Regular and reliable attendance is essential for the function of this job.
</p><p></p><p>AAA The Auto Club Group is committed to providing a safe workplace. Every applicant offered employment within The Auto Club Group will be required to consent to a background and drug screen based on the requirements of the position.</p></div>

IT Risk Analyst

Sancorp Consulting

<div><p>DCI Risk Management Analyst</p><p><b>
Position Summary:</b></p><div><div><div>
Position Description:</div><div><br>
DCI Risk Management Analyst</div></div><div><div><br>
Location:</div><div><br>
On-Site and Telework (when authorized), National Capital Region</div></div><div><div><br>
Employment Category:</div><div><br>
Full-Time Employee</div></div><div><div><br>
Travel:</div><div><br>
Yes</div></div><div><div><br>
Deployment:</div><div><br>
No</div></div><div><div><br>
Drug screening:</div><div><br>
Yes</div></div><div><div><div><br>
Security Clearance:</div><div>
Citizenship:</div></div><div></div><div><p><br>
Active top-secret security clearance, with SCI eligibility</p><p>
Must be a US Citizen</p></div></div><div><div><br>
Education</div><div><br>
Master&rsquo;s Degree in Risk Management, Information Technology, Information Systems or related field required</div></div><div><div><br>
Required Experience</div><div><br>
<ul><li>
8 years related experience</li><li>
Proficiency in identifying and evaluating potential risks in data center operations, including both cybersecurity threats and physical or operational risks.</li><li>
Understanding of data center infrastructure such as servers, storage systems, networking, and software. Knowledge of how these components interoperate and the potential vulnerabilities each may present.</li><li>
Ability to analyze complex data, draw conclusions, and develop actionable strategies to mitigate risk.</li><li>
Ability to develop and implement plans that ensure the continuity of data center operations in the event of a disaster or disruption.</li><li>
Strong written and verbal communication skills for reporting risk assessment findings, making recommendations to senior management, and educating staff on risk-related issues.</li></ul></div></div><div><div><br>
Preferred Experience</div><div><br>
<ul><li>
10 years related experience</li></ul></div></div><div></div><div><div><br>
Salary:</div><div><br>
Commensurate on experience.</div></div></div><div></div><div><b><br>
Responsibilities:</b></div><div></div><div><br>
SANCORP is seeking a DCI Risk Management Analyst to support the Office of the Under Secretary of Defense for Policy (OUSD(P)). The following are examples of responsibilities:</div><ul><li>
Provide technical advice and support to develop cooperative risk management programs for non DoD-owned DCI with key partners from across DoD, the USG, and at the Federal, State, and Local Level, and with private industry, with emphasis on the Energy, Communications, Water, and Transportation Sectors, leveraging existing relationships.</li><li>
Provide technical advice and analytic support to assist partners in developing an all threats and hazards identification, assessment, risk management and monitoring processes and programs that will meet DoD operational needs to understand the level of readiness of key assets and that will facilitate risk management to priority assets.</li><li>
Provide technical advice and support for MA team outreach and senior leader engagements that builds support across the USG and across society for prioritizing and DCI risk management and developing sustainable and robust programs and capabilities to facilitate risk management.</li><li>
Provide technical advice, analysis and support to deliver unconventional/extraordinary risk management for priority efforts.</li><li>
Provide technical advice and support for work with USNORTHCOM, USINDOPACOM, Services, and components, and interagency partners to deliver SECDEF priority risk management efforts for sites under their responsibility, and to develop processes that enable and align work at the State, Local, and Federal level.</li><li>
Provide technical advice and support for outside the wire international efforts, to enable and support MACB priority risk management efforts or HD&amp;HA leadership taskings.</li><li>
Document lessons learned to inform longer term risk management efforts.</li></ul><p>
Sancorp Consulting LLC shall, in its discretion, modify or adjust the position to meet Sancorp&rsquo;s changing needs. This job description is not a contract and may be adjusted as deemed appropriate at Sancorp&rsquo;s sole discretion.</p><p>
Sancorp Consulting, LLC, is an SDVOSB and SBA 8(a) company seeking highly motivated and qualified professionals and offer an attractive salary and benefits package that includes: Medical, Dental, life and Disability Insurance; 401K, and holidays to ensure the highest quality of life for our employees. Please visit our website for more information at www.sancorpconsulting.com.</p><p>
Sancorp Consulting, LLC is an equal opportunity employer. At Sancorp Consulting, LLC we are committed to providing equal employment opportunities (EEO) to all employees and applicants without regard to race color, religion, sex, national origin, age, disability, or any other protected characteristic as defined by applicable law. We strive to create an inclusive and diverse workplace where everyone feels valued, respected, and supported.</p></div><p></p>

DCI Risk Management Analyst

Tire Rack

<div><p><b>Sr. Information Security GRC Analyst</b></p>
<p><b>
Location:</b> Tire Rack &ndash; South Bend, IN (On-Site)<br>
<b>Department:</b> Information Security</p>
<p><b>
Employment Type:</b> Full-Time<br>
<b>Salary Range:</b> $115,000-$125,000 annually</p><br>
<p></p>
<p><b>
About the Role</b></p>
<p>
Tire Rack is seeking a Senior Information Security GRC Analyst to support and advance our Information Security Governance, Risk, and Compliance (GRC) program</p>
<p>
.</p>
<p>
In this role, you will assess and strengthen IT and security controls across the organization while ensuring alignment with regulatory, statutory, and industry security standards including ISO/IEC 27001:2022, PCI DSS, and internal security policies.</p><br>
<p></p>
<p>
This position works closely with IT teams, business leaders, and audit stakeholders to identify risk exposures, strengthen control frameworks, support audit readiness, and drive continuous improvement in Tire Rack&rsquo;s overall security posture.</p><br>
<p></p>
<p>
This role requires a strong mix of technical understanding, risk assessment expertise, and the ability to translate compliance requirements into practical, business-aligned security controls.</p><br>
<p></p>
<p>
At Tire Rack, we operate with the values of IOOGA &mdash; Integrity, Our People, Our Customers, Growth, and Attitude.</p><br>
<p></p>
<p><b>
What You'll Do</b></p><br>
<p></p>
<p><b>
Governance, Risk &amp; Compliance Leadership</b></p>
<ul><li>
Advise IT and business stakeholders on governance, risk, and compliance requirements by interpreting regulatory, statutory, and security standards and translating them into actionable control recommendations.</li><li>
Lead and support the organization&rsquo;s information security risk management program, including risk identification, assessment, documentation, and monitoring mitigation strategies.</li><li>
Evaluate technology risks and recommend practical mitigation strategies aligned with business objectives.</li></ul>
<p><b>
Controls &amp; Compliance</b></p>
<ul><li>
Develop and maintain GRC program documentation including:</li><li><ul><li>
Security policies</li><li>
Standards and procedures</li><li>
Risk registers</li><li>
Control inventories</li><li>
Evidence repositories</li></ul>
</li><li>Strengthen internal security controls by identifying opportunities to improve standardization, documentation, and compliance alignment.</li><li>
Define and communicate control expectations, testing procedures, and audit evidence requirements across teams.</li></ul>
<p><b>
Audit &amp; Testing</b></p>
<ul><li>
Coordinate internal and external audits, including planning, evidence collection, stakeholder coordination, and remediation tracking.</li><li>
Execute security control testing by:</li><li><ul><li>
Defining scope</li><li>
Reviewing and validating evidence</li><li>
Documenting results</li><li>
Identifying deficiencies</li><li>
Tracking remediation through resolution.</li></ul>
</li><li>Manage compliance findings, corrective actions, and risk acceptance documentation.</li></ul><br>
<p></p>
<p><b>
Program Improvement</b></p>
<ul><li>
Support security initiatives and technology projects by embedding governance, risk, and compliance practices into delivery.</li><li>
Track program metrics, audit results, and compliance trends to improve security maturity over time.</li><li>
Provide recommendations to strengthen Tire Rack&rsquo;s overall security and compliance framework.</li><li>
Perform other duties as assigned in support of the Information Security and Technology organization.</li></ul>
<p><b>
What We're Looking For</b></p>
<p>
We are looking for a security professional who brings both technical understanding and risk management expertise while partnering effectively across teams.</p><br>
<p></p>
<p><b>
Required Experience</b></p>
<ul><li>
5&ndash;7 years of experience in IT, cybersecurity, risk management, audit, or compliance roles.</li><li>
Strong knowledge of information security frameworks including:</li><li><ul><li>
ISO/IEC 27001</li><li>
PCI DSS</li><li>
Familiarity with GDPR concepts</li></ul>
</li><li>Understanding of IT environments, systems, and security controls across infrastructure, applications, and data environments.</li></ul>
<p><b>
Skills &amp; Competencies</b></p>
<ul><li>
Strong analytical and problem-solving abilities with the capacity to identify trends, patterns, and control risks.</li><li>
Ability to evaluate control design and operational effectiveness.</li><li>
Excellent documentation, organization, and attention to detail.</li><li>
Strong communication skills with the ability to explain complex technical or compliance concepts to both technical and non-technical audiences.</li><li>
Ability to work independently while collaborating effectively with cross-functional stakeholders.</li></ul>
<p><b>
Required Certifications (One or more)</b></p>
<p>
Candidates must possess one or more of the following professional certifications, or be able to obtain one within a reasonable period after hire:</p>
<ul><li>
CISA (Certified Information Systems Auditor)</li><li>
CRISC (Certified in Risk and Information Systems Control)</li><li>
CISSP (Certified Information Systems Security Professional)</li><li>
CISM (Certified Information Security Manager)</li><li>
CompTIA Security+</li></ul>
<p>
Equivalent or comparable information security, audit, risk, or compliance certifications may also be considered.</p><br>
<p></p>
<p><b>
Education</b></p>
<ul><li>
Bachelor&rsquo;s Degree in Information Systems, Information Technology, Cybersecurity, Risk Management, or a related field.</li></ul>
<p><b>
Work Schedule</b></p>
<p><b>
Work Days:</b><br>
Monday through Friday<br>
Occasional weekends may be required.</p>
<p><b>
Work Hours:</b><br>
8:00 a.m. &ndash; 5:00 p.m.<br>
Additional hours may be required depending on project or audit needs.</p><br>
<p></p>
<p>
#HP</p></div>

Sr. Information Security GRC Analyst

Tenneco

<div><div>At Tenneco, we don&rsquo;t follow industry standards; we set them, and we don&rsquo;t settle for being best-in-class because we hustle to be <i>better than</i> best-in-class. Whether it&rsquo;s our Core Values &ndash; radical candor, simplify, organizational velocity, tenacious execution and win &ndash; or our Get Stuff Done (GSD) mindset, we&rsquo;re determined to become the most trusted partner and best manufacturer and distributor to the transportation industry.</div><br>
<div></div>
<div>
With a product portfolio as expansive as it is innovative, an obsessive commitment to quality and excellence, and a global presence, we&rsquo;re all about getting stuff done, so we can win.</div><br>
<div>
</div><div>How do we make it happen? Through the Tenneco Way. Fueled by our Core Values, a winning mindset and a relentless commitment to excellence, the Tenneco Way is how we win. It&rsquo;s what keeps Team Tenneco bold, driven, and unapologetically focused on pushing past limits and redefining success.</div><br>
<div>
</div><div>Here, you&rsquo;ll work alongside a team of relentless problem-solvers who are committed to making a tangible impact. If you&rsquo;re ready to break boundaries, deliver results, and enjoy the ride along the way, you&rsquo;ll thrive here.</div><div><br>
Want to learn more about who we are? Check out our website to discover the Tenneco Way</div><br>
<div></div>
<div><b>
ABOUT TENNECO</b></div>
<div>
At Tenneco, we don&rsquo;t follow industry standards; we set them, and we don&rsquo;t settle for being best-in-class because we hustle to be <i>better than</i> best-in-class. Whether it&rsquo;s our Core Values&ndash;radical candor, simplify, organizational velocity, tenacious execution and win&ndash;or our Get Stuff Done (GSD) mindset, we&rsquo;re determined to become the most trusted partner and best manufacturer and distributor to the transportation industry.</div><br>
<div></div>
<div>
How do we make it happen? Through the Tenneco Way. Fueled by our Core Values, a winning mindset and a relentless commitment to excellence, the Tenneco Way is how we win. It&rsquo;s what keeps Team Tenneco bold, driven, and unapologetically focused on pushing past limits and redefining success.</div><br>
<div>
</div><div>Here, you&rsquo;ll work alongside a team of relentless problem-solvers who are committed to making a tangible impact. If you&rsquo;re ready to break boundaries, deliver results, and enjoy the ride along the way, you&rsquo;ll thrive here.</div><div><br>
Want to learn more about who we are? Check out our website to discover the Tenneco Way.</div><br>
<div></div>
<div><b>
ABOUT THE ROLE</b></div>
<div>
We are seeking an IT Risk Management Senior Analyst to help design, implement, and mature our enterprise cybersecurity and technology risk program. This role is ideal for a risk professional who has built risk programs&mdash;not just operated them&mdash;and who can translate complex technical risks into clear, prioritized, and measurable risk decisions for leaders.</div><br>
<div></div>
<div>
You will lead the development of our risk tolerance and thresholds, establish and manage a central risk register, and build a repeatable risk management lifecycle and supporting processes. You will partner across Cybersecurity, Physical Security, IT, Privacy, and business teams to ensure risks are identified, assessed, tracked, mitigated, and reported with consistency and transparency. This position is based in Northville, Michigan and reports directly to the Senior IT Governance Manager of the company.</div><br>
<div></div>
<div><b>
KEY RESPONSIBILITIES</b></div><br>
<div></div>
<div><b>
Risk Governance</b></div>
<ul>
<li>Define and operationalize risk tolerance and risk thresholds in partnership with leadership and stakeholders.</li>
<li>Develop and maintain a risk taxonomy, risk scoring methodology, and risk rating guidance to support consistent assessments.</li>
<li>Create and mature the risk management lifecycle including decision criteria, artifacts, roles, and accountability.</li>
</ul>
<div><b>Risk Register Management</b></div>
<ul>
<li>Establish a scalable security/technology risk register.</li>
<li>Implement workflows for intake, review, approval, and periodic reassessment.</li>
<li>Ensure risks are measurable, comparable, and traceable through evidence and documentation.</li>
</ul>
<div><b>Risk Assessment &amp; Treatment</b></div>
<ul>
<li>Partner closely with the IT Compliance team to document risk treatment plans: mitigation, acceptance, transfer, or avoidance; ensure alignment with risk thresholds.</li>
<li>Develop and manage the process for risk acceptance and exception handling, including decision criteria, approvals, and expiration/renewal.</li>
</ul>
<div><b>Reporting, Metrics &amp; Executive Communication</b></div>
<ul>
<li>Build risk reporting and dashboards that clearly communicate:
<ul><li>Risk posture against thresholds</li>
<li>Top risks and trends</li>
<li>Treatment progress and overdue actions</li>
</ul></li><li>Prepare risk summaries for leadership forums</li>
</ul>
<div><b>Process Development &amp; Continuous Improvement</b></div>
<ul>
<li>Create and maintain risk management playbooks, templates, standards, and procedures</li>
<li>Identify opportunities to streamline risk operations through tooling and automation (GRC platforms, workflow automation, integrations).</li>
</ul>
<div><b>JOB REQUIREMENTS</b><b>
</b></div><ul><li>5&ndash;8+ years of experience in cybersecurity risk management, technology risk, GRC, or operational risk.</li>
<li>Demonstrated experience setting risk tolerance and thresholds and translating them into practical decision rules.</li>
<li>Proven track record of building and operating a risk register.</li>
<li>Experience creating or maturing a risk management lifecycle and supporting processes</li>
<li>Strong understanding of cybersecurity concepts (controls, threats, vulnerabilities, cloud risk, identity, incident risk, third-party risk).</li>
<li>Excellent written and verbal communication: ability to deliver clear, executive-ready risk narratives and recommendations.</li>
<li>Experience with GRC tools (e.g., ServiceNow GRC, Archer, OneTrust, LogicGate, MetricStream) or comparable workflow systems.</li>
</ul>
<div><b>Skills:</b></div>
<ul>
<li>Excellent communication, organization time management and problem-solving skills</li>
<li>Exceptional track record of building relationships with stakeholders</li>
<li>Strong multi-tasking skills with the ability to manage multiple projects</li>
<li>Ability to function as a Team Player and maintain a good working relationship, yet think and act independently with professionalism, discretion and confidentiality</li>
<li>Excellent communication, organization time management and problem-solving skills</li></ul><br>
<div></div>
<div><b>
</b></div><div><b>We don&rsquo;t want average. We want exceptional. We want someone who&rsquo;s hungry to build, unafraid to challenge, and bold enough to lead with empathy, speed, and precision. Sound like you? Let us know.</b></div><br>
<div>
</div><div><b>Equal opportunity employer as to all protected groups, including protected veterans and individuals with disabilities</b></div></div>

IT Risk Management Senior Analyst

Systems Limited

<div>
 <p>
  The ideal candidate for this role will support the global Information Security function and assist the Global CISO in delivering cybersecurity risk management aligned with the organization&rsquo;s business strategy.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Location:
  </strong>
  Karachi, Lahore, Islamabad, Multan, Faislabad.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Responsibilities:
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Conduct information security risk assessments and related analysis across systems, projects, and third-party engagements.
  </li>
  <li>
   Maintain and update the Information Security Risk Register, ensuring risks are accurately documented and tracked.
  </li>
  <li>
   Monitor and report Key Risk Indicators (KRIs), ensuring timely escalation when thresholds are exceeded.
  </li>
  <li>
   Support the management of exceptions to Information Security policies, including assessment, documentation, and tracking.
  </li>
  <li>
   Assist in managing the cybersecurity risk lifecycle, from identification and assessment to mitigation and reporting.
  </li>
  <li>
   Provide risk reporting and insights to stakeholders and senior security leadership.
  </li>
  <li>
   Ensure security risk practices align with regulatory requirements, security frameworks, and internal risk appetite.
  </li>
  <li>
   Work closely with security teams, business units, and technology teams to promote risk awareness and improve risk management processes.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Requirements:
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   3&ndash;5 years of experience in Information Security, Cyber Risk, or IT Risk Management.
  </li>
  <li>
   Experience conducting information security risk assessments and maintaining risk registers.
  </li>
  <li>
   Familiarity with cybersecurity frameworks and standards such as ISO 27001, NIST, or similar.
  </li>
  <li>
   Understanding of cybersecurity risk lifecycle, governance, and compliance practices.
  </li>
  <li>
   Strong analytical, documentation, and reporting skills.
  </li>
  <li>
   Ability to communicate risk concepts clearly to technical and non-technical stakeholders.
  </li>
  <li>
   Relevant certifications such as CISM, CRISC, CISSP, or ISO 27001 are a plus.
  </li>
 </ul>
 <p>
 </p>
</div>


Booz Allen Hamilton

<div>Information Security Risk Specialist, Mid<p><b>
The Opportunity:</b></p><p>
Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to Department of War (DoW) organizations. In all of this &ldquo;cyber noise,&rdquo; how can these organizations understand their risks and how to mitigate them? The answer is you&mdash;an information security risk specialist who will break down complex threats into manageable plans of action.</p><p></p><p>
As an information security risk specialist on our team, you&rsquo;ll use your experience to work with DoW leaders to discover their cyber risks, understand applicable policies, and develop a mitigation plan. You&rsquo;ll review technical and personnel details from subject matter experts to assess the entire threat landscape. Then, you&rsquo;ll guide your client through a plan of action with presentations, white papers, and milestones.</p><p></p><p>
You&rsquo;ll work with your customer to translate security concepts, so they can make the best decisions to secure their mission-critical networks. This is your opportunity to act as an information security subject matter expert while broadening your skills in cybersecurity governance, risk management, and compliance.</p><p></p><p>
Work with us as we protect our military's communications systems.</p><p></p><p>
Join us. The world can&rsquo;t wait.</p><p></p><p><b>
You Have:</b></p><ul><li><p>
2+ years of experience with IT operations or cybersecurity</p></li><li><p>
Experience in a cybersecurity compliance, operations, or engineering leadership role</p></li><li><p>
Experience with supporting cybersecurity compliance, audits, or inspections</p></li><li><p>
Ability to work with and guide senior leaders, including CISO, CIO, and CTO, and executives to ideate, build, and execute cybersecurity capability maturation</p></li><li><p>
Ability to collaborate with project and proposal teams to incorporate cybersecurity solutions and develop high quality implementation plans and roadmaps</p></li><li><p>
Ability to author technical documentation, whitepapers, and blogs on leading cybersecurity topics and concepts</p></li><li><p>
Top Secret clearance</p></li><li><p>
HS diploma or GED</p></li><li><p>
Information Security Certification, including CEH, CISM, CCSP, CCSK, CISSP, or CompTIA Security+ Certification</p></li></ul><p></p><p><b>
Nice If You Have:</b></p><ul><li><p>
Experience with defense or national security-related issues in the Indo-Pacific region</p></li><li><p>
Experience with NIST 800-53 and DoD 8500 or 8510</p></li><li><p>
Experience with selecting, designing, and implementing security tools and capabilities for large, complex federal or commercial organizations</p></li><li><p>
Experience with Amazon Web Services (AWS), Azure, or Google Cloud Platform (GCP)</p></li><li><p>
Knowledge of the Enterprise Mission Assurance Support Service (eMASS)</p></li><li><p>
Knowledge of innovative cybersecurity capabilities, including AI and machine learning, Next-Generation Firewall (NGFW), and Big Data</p></li><li><p>
Knowledge of Mission Partner Engagement (MPE)</p></li><li><p>
Ability to assist in developing cybersecurity policies or governance frameworks</p></li><li><p>
Possession of excellent verbal and written communication skills</p></li><li><p>
Bachelor's degree</p></li></ul><p></p><p><b>
Clearance:</b></p><p>
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Top Secret clearance is required.</p><p></p><p><b>
Compensation</b></p><p>
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.</p><p></p>
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $61,900.00 to $141,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.<p></p><p><b>
Identity Statement</b></p><p>
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.</p><p></p><p><b>
Work Model</b><br>
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.</p><ul><li>
If this position is listed as remote or hybrid, you&rsquo;ll periodically work from a Booz Allen or client site facility.</li><li>
If this position is listed as onsite, you&rsquo;ll work with colleagues and clients in person, as needed for the specific role.</li></ul><p></p><p><b>
Commitment to Non-Discrimination</b></p><p>
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</p></div><p></p>

Information Security Risk Specialist, Mid

Walmart

<div><h2 class="jobSectionHeader"><b>Position Summary...</b></h2><p></p><h2 class="jobSectionHeader"><b>
What you'll do...</b></h2><b>
Role summary:</b>
<br>
The (USA) Risk Expert III plays a critical role in identifying, assessing, and mitigating cyber security risks within the organization. This position involves conducting thorough vulnerability assessments, penetration testing, and security audits to safeguard network infrastructure and data integrity. The role requires collaboration with stakeholders to develop and implement effective risk management strategies aligned with corporate policies and evolving security landscapes. The expert will analyze threats, recommend mitigation measures, and ensure compliance with security standards to protect organizational assets and support business continuity.
<br>
<b>About the team:</b>
<br>
The Technical Controls Assessment team at Walmart is dedicated to protecting enterprise solutions by evaluating security controls and ensuring adherence to organizational policies. Utilizing expertise in cyber security, risk management, and vulnerability assessments, the team supports secure cloud transformations and conducts thorough penetration testing. They collaborate closely with stakeholders to identify and mitigate digital threats, enhancing Walmart&rsquo;s security posture. Their work reinforces the company&rsquo;s commitment to innovation and trust across all operations and brands, maintaining a resilient and secure environment aligned with business objectives.
<br>
<b>What you'll do:</b>
<br>
<ul><li>Identify and analyze network security threats, vulnerabilities, and risks to recommend effective mitigation measures.</li><li>
Design and conduct security assessments, including penetration testing and vulnerability scans, to evaluate system defenses.</li><li>
Implement and monitor perimeter security, network hardening, and authentication controls aligned with organizational standards.</li><li>
Review security logs and audit reports to detect and report incidents and intrusions.</li><li>
Collaborate with stakeholders to assess cyber risk and develop risk management strategies.</li><li>
Evaluate and recommend security technologies and controls to enhance compliance with corporate policies.</li><li>
Communicate findings and provide expert guidance on security improvements and risk reduction.</li></ul>
<br>
<b>What you'll bring:</b>
<br>
<ul><li>Proven expertise in cyber security, risk management, and vulnerability assessments.</li><li>
Strong knowledge of network security protocols, hardware and software security products, and encryption standards.</li><li>
Experience conducting penetration testing and analyzing security threats to recommend effective mitigation measures.</li><li>
Ability to assess cyber risks, identify security gaps, and develop actionable risk management strategies.</li><li>
Proficiency in reviewing security logs, audit reports, and compliance with security policies and frameworks.</li><li>
Skilled in stakeholder engagement to communicate risks and collaborate on security solutions.</li><li>
Familiarity with security assessment tools and threat intelligence analysis.</li></ul>
At Walmart, we offer competitive pay as well as performance-based bonus awards and other great benefits for a happier mind, body, and wallet. Health benefits include medical, vision and dental coverage. Financial benefits include 401(k), stock purchase and company-paid life insurance. Paid time off benefits include PTO (including sick leave), parental leave, family care leave, bereavement, jury duty, and voting. Other benefits include short-term and long-term disability, company discounts, Military Leave Pay, adoption and surrogacy expense reimbursement, and more. You will also receive PTO and/or PPTO that can be used for vacation, sick leave, holidays, or other purposes. The amount you receive depends on your job classification and length of employment. It will meet or exceed the requirements of paid sick leave laws, where applicable. For information about PTO, see https://one.walmart.com/notices. Live Better U is a Walmart-paid education benefit program for full-time and part-time associates in Walmart and Sam's Club facilities. Programs range from high school completion to bachelor's degrees, including English Language Learning and short-form certificates. Tuition, books, and fees are completely paid for by Walmart.
<br>
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to a specific plan or program terms.
<br>
For information about benefits and eligibility, see One.Walmart.
<br>
The annual salary range for this position is $90,000.00 - $180,000.00 Additional compensation includes annual or quarterly performance bonuses. Additional compensation for certain positions may also include :
<br>
<ul><li>Stock</li></ul><p>
ㅤ</p><p></p><p>
ㅤ</p><p>
ㅤ</p><p>
ㅤ</p><p></p><p>
&lrm;</p><h2 class="jobSectionHeader"><b>
Minimum Qualifications...</b></h2><p><i>
Outlined below are the required minimum qualifications for this position. If none are listed, there are no minimum qualifications.
</i></p><p></p>Option 1: Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 2years&rsquo; experience in cybersecurity risk or related area at a technology, retail, or data-driven company.<br>
Option 2: 4 years&rsquo; experience in cybersecurity risk or related area at a technology, retail, or data-driven company.<p></p><h2 class="jobSectionHeader"><b>
Preferred Qualifications...</b></h2><p><i>
Outlined below are the optional preferred qualifications for this position. If none are listed, there are no preferred qualifications.</i></p><p></p>
Certification in Security+, GISF, GSEC, CISA, CISSP, or CCSP, Master&rsquo;s degree in Computer Science, Information Technology, Engineering, Information Systems, Cybersecurity, or related area, We value candidates with a background in creating inclusive digital experiences, demonstrating knowledge in implementing Web Content Accessibility Guidelines (WCAG) 2.2 AA standards, assistive technologies, and integrating digital accessibility seamlessly. The ideal candidate would have knowledge of accessibility best practices and join us as we continue to create accessible products and services following Walmart&rsquo;s accessibility standards and guidelines for supporting an inclusive culture.<p></p>
CISA - Certified Information Systems Auditor - Certification, CISSP - Certified Information Systems Security Professional - Certification<h2 class="jobSectionHeader"><b>
Primary Location...</b></h2><p></p>
805 Se Moberly Ln, Bentonville, AR 72712, United States of America<p></p>
Walmart and its subsidiaries are committed to maintaining a drug-free workplace and has a no tolerance policy regarding the use of illegal drugs and alcohol on the job. This policy applies to all employees and aims to create a safe and productive work environment.</div>

(USA) Risk Expert III

Search 10000+ Cybersecurity risk analyst jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 cybersecurity risk analyst jobs Near Me

IT Risk Analyst

DCI Risk Management Analyst

Sr. Information Security GRC Analyst

IT Risk Management Senior Analyst

IT Risk Analyst

Information Security Risk Specialist, Mid

(USA) Risk Expert III