security risk analyst

Blue Cross Blue Shield

<div>An Internship with the Blue Cross Blue Shield Association (BCBSA) allows you to be part of the foundation that supports Blue Cross and Blue Shield (BCBS) companies nationwide. We seek to improve health care quality, affordability and accessibility for all Americans, and we want you to join the team! Our Summer Internships Include: 10 week paid program during the Summer Challenging real-world, hands-on projects. Mentoring from BCBSA Professionals. Performance Evaluation Process &amp; Presentations. Volunteer Activity, Planned Social Outings and Networking Events. This internship is located in Chicago. This is a hybrid position with 3-4 days in-office.<div></div><ul><li>
Ensure complete confidentiality of company business.</li><li>
Keep management informed about developments within areas of responsibility and handle special projects as needed.</li><li>
Create a final PowerPoint presentation to share with department leadership, summarizing the internship experience, the assigned project, results, and any recommendations for future use .</li><li>
Adhere to HIPAA, Diversity Principles, Corporate Integrity, Compliance Program policies, and other relevant corporate and departmental policies.</li><li>
support vendor risk assessment operations and GRC platform optimization under the supervision of current manager.</li><li>
Backlog of 120+ pending vendor risk assessments creates compliance risk and inefficiency. Resource constraints limit our ability to maintain optimal assessment velocity, timely vendor follow-up, and platform data quality in Whistic and LogicGate.</li><li>
Reduce assessment backlog by 30-40% (40-50 assessments completed)</li><li>
Improve vendor response time from 21 days to 14 days</li><li>
Clean up 100% of identified data integrity issues in GRC platforms</li><li>
Establish systematic business owner engagement framework</li><li>
Delivers immediate operational relief while strengthening BCBSA's cybersecurity talent pipeline and employer brand. Provides hands-on experience in enterprise risk management within healthcare compliance environment, with commitment to meaningful hybrid mentorship (in-office 3-4 days/week).</li></ul><div></div><div>
Financials-We have established a firm hourly rate of $26.00 per hour.<br>
<br>
Education</div><ul><li>
Preferred Bachelor's Degree Pursuing a bachelor&rsquo;s degree</li></ul><div>
Experience</div><ul><li>
1+ Year relevant degree level Required</li></ul><div><br>
Knowledge Skills and Abilities</div><ul><li>
Demonstrated interpersonal skills<br>
Effective communication skills, both verbal and written<br>
Problem-solving and analytical skills<br>
Self-starter with good time management skills<br>
Proactive and eager to learn<br>
Developing computer skills. Experience with Microsoft Excel, Word, PowerPoint and SharePoint preferred.<br>
(Dept to add specific skills required for the project, i.e technical requirements, specific coursework completed, etc.)</li><li>
Extra Posting Information:</li><li><div>
Pursuing degree. minimum GPA of 3.0/4.0</div></li><li><div>
Availability to work ten weeks during the summer</div></li><li><div>
Unrestricted authorization to working the United States (Currently, we are not offering this position with student visa including F1, OPT, CPT or H1B and are not accepting or sponsoring student work visas for this role.</div></li></ul><div></div><div>
#LI-Hybrid</div><div></div><div><div>
The posted salary range is the lowest to highest salary we, in good faith, believe we would pay for this role at the time of this posting. We may ultimately pay more or less than the hiring range and this hiring range may also be modified in the future. A candidate&rsquo;s position within the hiring range may be based on several factors including, but not limited to, specific competencies, relevant education, qualifications, certifications, relevant experience, skills, seniority, performance, shift, travel requirements, and business or organizational needs. This job is also eligible for <i>annual </i><i>bonus</i><i> </i><i>incentive</i><i> </i>pay.</div></div><div><div>
We offer a comprehensive package of benefits <i>including paid</i><i> time off,</i><i> 11 holidays,</i><i> </i><i>medical/dental/vision</i><i> insurance, </i><i>generous </i><i>401(k)</i><i> matching</i><i>,</i><i> lifestyle spending account</i><i> and </i><i>m</i><i>any other benefits </i>to eligible employees.</div></div><div></div><div><div>
Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, or any other form of compensation that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company&rsquo;s sole discretion, consistent with the law.</div></div></div><div></div>

Cyber Security Risk Analyst- Internship

Ropes & Gray LLP

<div>About Ropes &amp; Gray:
<p>
Ropes &amp; Gray is a preeminent global law firm. The firm has been ranked in the top three on <i>The American Lawyer's</i> prestigious A-List for eight consecutive years and #1 on <i>Law.com's</i> UK A-List twice in the past three years - rankings that honor the &quot;best of the best&quot; law firms.<br>
<br>
The firm has approximately 2,500 lawyers and professionals serving clients in major centers of business, finance, technology, and government in Boston, Chicago, Dublin, Hong Kong, London, Los Angeles, Milan, New York, Paris, San Francisco, Seoul, Shanghai, Silicon Valley, Singapore, Tokyo and Washington, D.C.<br>
<br>
The firm has consistently been recognized for its leading practices in many areas, including asset management, private equity, M&amp;A, finance, real estate, tax, antitrust, life sciences, health care, intellectual property, litigation &amp; enforcement, privacy &amp; cybersecurity, and business restructuring.<br>
<br>
Ropes &amp; Gray is an equal opportunity employer.</p>
Overview:
<div>
Reporting to the Manager of Information Security Risk &amp; Compliance, the information security risk &amp; compliance analyst assists in the management and execution of the firm&rsquo;s data security, compliance, and risk management programs. The position supports information security, privacy, compliance, and data governance initiatives and helps promote a culture of information security throughout the organization. The role requires a basic understanding of IT systems and security concepts, and a willingness to learn and grow in the field.</div>
Responsibilities:
<ul><li>Assist in maintaining the firm&rsquo;s ISO 27001:2022 Information Security Management System, assist with SOC2 audit preparedness and SOC2 audit completion, and support additional compliance activities as needed.</li><li>
Support the firm&rsquo;s initiatives to be at the forefront of GenAI and legal technology, reviewing vendor offerings and providing guidance on secure-by-design principals that meet or exceed industry standards.</li><li>
Support monitoring of the firm&rsquo;s policies and procedures.</li><li>
Help coordinate vulnerability management activities with guidance from other team functional areas.</li><li>
Assist in vendor risk management program tasks.</li><li>
Support responses to client audits, client RFPs, and related requests.</li><li>
Help coordinate third party technical risk assessments and audit activities.</li><li>
Assist in producing and maintaining information security documentation, including policies, procedures, standards, guidelines, and diagrams.</li><li>
Help assess potential items of risk and opportunities of vulnerability in the network</li><li>
Assist in Change Management and architecture reviews of new and existing firm technology.</li><li>
Participate in knowledge transfer sessions and training with senior team members.</li><li>
Promote a culture of information security across business units under guidance.</li><li>
Learn about the role of systems and technology within the firm and their value to the business.</li></ul><div><b>
OTHER RESPONSIBILITIES:</b></div><ul><li>
Pursue relevant security certifications and attend industry seminars and continuing education events as assigned.</li><li>
Perform other related duties as assigned.</li></ul>
Qualifications:
<div><b>
EDUCATION, EXPERIENCE AND SKILLS REQUIRED:</b></div><ul><li>
Bachelor of Science in a technology-related discipline or 1-2 years of relevant experience</li><li>
1-2 years of experience in information security, IT risk management, or IT support</li><li>
Basic knowledge of ISO 27001:2022 and risk management frameworks (ISO 27005, NIST, COBIT 5).</li><li>
Knowledge of SOCII audit criteria and procedures.</li><li>
Basic understanding of HIPAA and data security regulations</li><li>
Familiarity with Microsoft, Cisco, Unix/Linux, and mobile technologies</li><li>
Strong written and oral communication skills</li><li>
Organized, responsive, and willing to learn</li><li>
Security certification (such as Security+, SSCP, or similar) preferred but not required</li></ul><div><b>
ESSENTIAL CAPABILITIES:</b></div><ul><li>
Ability to relate to non-technical users in user-friendly language</li><li>
Ability to understand technical implications of security threats with guidance</li><li>
Ability to manage multiple tasks and prioritize under supervision</li><li>
Ability to maintain confidentiality of internal and personnel affairs</li><li>
Ability to work well with others and contribute to team spirit</li><li>
Self-motivated and eager to develop professionally</li><li>
Ability to work in a multi-office environment and willingness to travel as required</li><li>
Ability to work effectively in a culturally and educationally diverse environment</li></ul>
Compensation and Total Rewards Package:
<p>
Ropes &amp; Gray is proud to offer a comprehensive Total Rewards package to our business support team members. The firm also offers comprehensive health and well-being benefits, personal and professional development, career growth opportunities and a collegial and supportive culture. The anticipated pay range for this role is listed below and represents our good faith and reasonable estimate of the starting salary range at the time of posting. In addition, this role is eligible for a discretionary bonus based on performance. The actual offered rate for this position will be determined based on job-related, non-discriminatory factors, including qualifications and experience, geographic location, education, external market data and consideration of internal equity.</p><ul><li>
Boston: $88,600 - $135,100</li><li>
New York: $96,600 - $147,300</li></ul>
Working Conditions:
<p>
This position requires hybrid on-site presence as an essential function of the role. Consistent and predictable on-site presence is required for ongoing business continuity, professional development and effective collaboration with colleagues and management.</p></div>

Information Security Risk & Compliance Analyst

Ivanti

<div><p>Are you an experienced Security Data and Risk Analyst that wants to develop and create awareness around security-relevant key performance and key risk indicators? At Ivanti, we work passionately and authentically, striving to win together and make a real impact for our customers and each other. Join us to elevate your career and help deliver innovative solutions in a dynamic, empowering environment.</p>
<p><b>
Why this role matters</b></p>
<p>
As the Security Data and Risk Analyst, you will generate enterprise visibility, awareness and understanding of major risk and security issues in a comprehensive and easily consumed manner to support the corporate objectives and especially the reduction of risk. You will be a leader in our Information Security Group which is a global team of experienced professionals dedicated to ensuring the security of Ivanti's products, corporate and production networks, environments, and of course, its data</p>
<p><b>
What you'll do:</b></p>
<ul>
<li>Lead the execution of multiple functions: Taking ownership of and creating awareness around security-relevant key performance and key risk indicators</li>
<li>Develop automation for data gathering, analysis and presentation using Python and Go</li>
<li>Educate as well as inform audiences of a wide variety of security and risk expertise, including building libraries of material to support understanding of benefits and costs of security management.</li>
<li>Generating insights and supporting information for decisions to be made including wrangling data from complex data sets and data sources</li>
<li>Create dynamic dashboards and presentations</li>
<li>Articulate risk and risk management as realistic, measurable harm; Create dynamic dashboards and presentations</li>
<li>Support the Security Governance and executive workstreams, including analysis and presentations materials.</li>
<li>Coordinate, chair and present data to management, leadership and C-suite stakeholders in their languages.</li>
</ul>
<p><b>What you will bring:</b></p>
<ul>
<li>Minimum of a bachelor's degree, preferably in information systems or data analytics.</li>
<li>4+ years' experience with <b>Python automation with multiple versions of Python</b></li>
<li>4+ years <b>Go programming</b> (<b>Golang)</b> automation and scripting</li>
<li>1+ years dashboard building</li>
<li>1+ years experience with 1 or more of the following security items: SOC,<b> SIEM </b>(Security Information &amp; Event Management), Application Security (AppSec), or vulnerabilities and incident management.</li>
<li>2+ experience with Risk Management</li>
<li>1 years' experience with Risk Modeling</li>
<li>4+ years Data Analytics experience</li>
<li>Familiarity with information security and security terms</li>
<li>Experience conducting reporting operations such as presentations, metrics, dashboards, KPIs, KRIs, OKRs.</li>
<li>1 year experience executing/leading project management efforts in a technology-related arena.</li>
<li>Can show evidence has created effective KPIs, KRIs and OKRs and a means to measure and report each.</li>
<li>Ability to articulate themes from: NIST, ISO, SOC 2, FedRAMP, GDPR and DORA, and Security, Privacy principles.</li>
<li>Experience with information application security, system security and cybersecurity.</li></ul><br>
<p></p>
<p><b>
Why Ivanti?</b></p>
<ul>
<li><b>Friendly flexible working model: </b>Empower excellence whether you're at home or in the office and support work-life balance<b>.</b></li>
<li><b>Competitive compensation &amp; total rewards</b>: Including health, wellness, and financial plans tailored for you and your family.</li>
<li><b>Global, diverse teams:</b> Collaborate with talented people from 23+ countries.</li>
<li><b>Learning &amp; development:</b> Grow your skills with access to best-in-class learning tools and programs.</li>
<li><b>Equity &amp; belonging:</b> We value every voice. Your story helps inform our solutions for a changing world.</li>
</ul>
<p><b>What drives us</b></p>
<p>
Ivanti's mission is to elevate human potential within organizations by managing, protecting and automating technology for continuous innovation.</p>
<p>
It is through diverse and inclusive hiring, decision-making, and commitment to our employees and partners that we will continue to build and deliver world-class solutions for our customers.</p>
<p><i>
To learn more about Ivanti's </i><i>Mission and Core Values.</i></p>
<p><b>
Inclusion at Ivanti</b></p>
<p>
Ivanti is proud to be an <b>Equal Opportunity Employer</b>. We're committed to building a diverse team and fostering an inclusive environment where everyone belongs. We welcome applicants from all backgrounds and walks of life.</p>
<p>
Need adjustments during the process? Reach out to talent@ivanti.com we're happy to help.</p><br>
<p></p>
<p>
#LI-Remote</p></div>

Information Security Data and Risk Analyst

Tire Rack

<div><p><b>Sr. Information Security GRC Analyst</b></p>
<p><b>
Location:</b> Tire Rack &ndash; South Bend, IN (On-Site)<br>
<b>Department:</b> Information Security</p>
<p><b>
Employment Type:</b> Full-Time<br>
<b>Salary Range:</b> $115,000-$125,000 annually</p><br>
<p></p>
<p><b>
About the Role</b></p>
<p>
Tire Rack is seeking a Senior Information Security GRC Analyst to support and advance our Information Security Governance, Risk, and Compliance (GRC) program</p>
<p>
.</p>
<p>
In this role, you will assess and strengthen IT and security controls across the organization while ensuring alignment with regulatory, statutory, and industry security standards including ISO/IEC 27001:2022, PCI DSS, and internal security policies.</p><br>
<p></p>
<p>
This position works closely with IT teams, business leaders, and audit stakeholders to identify risk exposures, strengthen control frameworks, support audit readiness, and drive continuous improvement in Tire Rack&rsquo;s overall security posture.</p><br>
<p></p>
<p>
This role requires a strong mix of technical understanding, risk assessment expertise, and the ability to translate compliance requirements into practical, business-aligned security controls.</p><br>
<p></p>
<p>
At Tire Rack, we operate with the values of IOOGA &mdash; Integrity, Our People, Our Customers, Growth, and Attitude.</p><br>
<p></p>
<p><b>
What You'll Do</b></p><br>
<p></p>
<p><b>
Governance, Risk &amp; Compliance Leadership</b></p>
<ul><li>
Advise IT and business stakeholders on governance, risk, and compliance requirements by interpreting regulatory, statutory, and security standards and translating them into actionable control recommendations.</li><li>
Lead and support the organization&rsquo;s information security risk management program, including risk identification, assessment, documentation, and monitoring mitigation strategies.</li><li>
Evaluate technology risks and recommend practical mitigation strategies aligned with business objectives.</li></ul>
<p><b>
Controls &amp; Compliance</b></p>
<ul><li>
Develop and maintain GRC program documentation including:</li><li><ul><li>
Security policies</li><li>
Standards and procedures</li><li>
Risk registers</li><li>
Control inventories</li><li>
Evidence repositories</li></ul>
</li><li>Strengthen internal security controls by identifying opportunities to improve standardization, documentation, and compliance alignment.</li><li>
Define and communicate control expectations, testing procedures, and audit evidence requirements across teams.</li></ul>
<p><b>
Audit &amp; Testing</b></p>
<ul><li>
Coordinate internal and external audits, including planning, evidence collection, stakeholder coordination, and remediation tracking.</li><li>
Execute security control testing by:</li><li><ul><li>
Defining scope</li><li>
Reviewing and validating evidence</li><li>
Documenting results</li><li>
Identifying deficiencies</li><li>
Tracking remediation through resolution.</li></ul>
</li><li>Manage compliance findings, corrective actions, and risk acceptance documentation.</li></ul><br>
<p></p>
<p><b>
Program Improvement</b></p>
<ul><li>
Support security initiatives and technology projects by embedding governance, risk, and compliance practices into delivery.</li><li>
Track program metrics, audit results, and compliance trends to improve security maturity over time.</li><li>
Provide recommendations to strengthen Tire Rack&rsquo;s overall security and compliance framework.</li><li>
Perform other duties as assigned in support of the Information Security and Technology organization.</li></ul>
<p><b>
What We're Looking For</b></p>
<p>
We are looking for a security professional who brings both technical understanding and risk management expertise while partnering effectively across teams.</p><br>
<p></p>
<p><b>
Required Experience</b></p>
<ul><li>
5&ndash;7 years of experience in IT, cybersecurity, risk management, audit, or compliance roles.</li><li>
Strong knowledge of information security frameworks including:</li><li><ul><li>
ISO/IEC 27001</li><li>
PCI DSS</li><li>
Familiarity with GDPR concepts</li></ul>
</li><li>Understanding of IT environments, systems, and security controls across infrastructure, applications, and data environments.</li></ul>
<p><b>
Skills &amp; Competencies</b></p>
<ul><li>
Strong analytical and problem-solving abilities with the capacity to identify trends, patterns, and control risks.</li><li>
Ability to evaluate control design and operational effectiveness.</li><li>
Excellent documentation, organization, and attention to detail.</li><li>
Strong communication skills with the ability to explain complex technical or compliance concepts to both technical and non-technical audiences.</li><li>
Ability to work independently while collaborating effectively with cross-functional stakeholders.</li></ul>
<p><b>
Required Certifications (One or more)</b></p>
<p>
Candidates must possess one or more of the following professional certifications, or be able to obtain one within a reasonable period after hire:</p>
<ul><li>
CISA (Certified Information Systems Auditor)</li><li>
CRISC (Certified in Risk and Information Systems Control)</li><li>
CISSP (Certified Information Systems Security Professional)</li><li>
CISM (Certified Information Security Manager)</li><li>
CompTIA Security+</li></ul>
<p>
Equivalent or comparable information security, audit, risk, or compliance certifications may also be considered.</p><br>
<p></p>
<p><b>
Education</b></p>
<ul><li>
Bachelor&rsquo;s Degree in Information Systems, Information Technology, Cybersecurity, Risk Management, or a related field.</li></ul>
<p><b>
Work Schedule</b></p>
<p><b>
Work Days:</b><br>
Monday through Friday<br>
Occasional weekends may be required.</p>
<p><b>
Work Hours:</b><br>
8:00 a.m. &ndash; 5:00 p.m.<br>
Additional hours may be required depending on project or audit needs.</p><br>
<p></p>
<p>
#HP</p></div>

Sr. Information Security GRC Analyst

Contour Software

<div><div>About Contour</div><div></div><div><div>
Contour Software</div> has grown from a dozen people to over 2,000 staff across 3 cities, in less than 14 years.</div><div><br>
As a subsidiary of Constellation Software Inc., we are proud to be part of a global enterprise software conglomerate that has grown to become one of the top 10 software companies in the world, with employees and customers in 100+ countries. With a broad-based and ever-growing portfolio of market-leading, vertical-market enterprise solutions covering more than 100 industry domains in predominantly mature markets, CSI's recipe creates the perfect environment for professionals to build fulfilling, long-term careers.</div><div><br>
What started as an R&amp;D &amp; Accounting back-office, has progressed into a full-service Global Centre serving all functions and departments, at the divisional as well as operating group/corporate level. Today Contour employees, located in Karachi, Lahore &amp; Islamabad, are serving CSI divisions located in time zones spanning the globe, from Sydney to Vancouver. With the global growth of Constellation as the wind in our sails, we are only just getting started!</div><div></div><div><div><div>
The Division:<br>
<div>FOG Software Group</div> - a division of Vela Software Group part of Constellation Software Inc. - specializes in complete ERP solutions for manufacturers and distributors of make-to-order and engineer-to-order products in the building products, capital equipment, and automotive sectors. FOG also includes a complementary portfolio of software solutions for transportation management, material optimization, supply-chain management, multi-channel merchant, and direct-to-consumer distribution.<br>
<br>
The Position:<br>
As GRC Analyst for the FOG Software group , you will support certain companies within the FOG Software operating group to meet the regulatory and compliance requirements specifically PCI DSS as well support in meeting the Vela compliance requirements by working with specific business units IT, customer support, development teams as well as Vela GRC. We are looking for individuals who move fast, can break down and solve complex problems, and have strong ethical values.<br>
The hired candidate will be located and work out of the Contour Software Islamabad/Karachi/Lahore office, working as part of the resource-center, as an extension of the division-based G&amp;A department.<br>
<br>
Responsibilities:</div></div><div><div>
Document and implement information security policies and standards (related to PCI-DSS and NIST CSF compliance requirements) specific to certain business units.</div></div><div><div>
Lead the PCI-DSS compliance initiatives, monitor, and report the gaps in compliance to management.</div></div><div><div>
Review information systems, IT and SSDLC practices to ensure compliance with business unit's GDPR/ISO/PCI-DSS requirements as well as Vela security framework requirements including processes, standards, policies, and procedures.</div></div><div><div>
Conduct risk assessments to identify potential risk events and assist with quantifying their probability of occurrence and impact on the business and work with risk owners in mitigating those risks.</div></div><div><div>
Collaborate IT TechOps and security team to monitor risks and compliance status, report and develop countermeasures and contingency plans.</div></div><div><div>
Monitor the security logs of anti-virus and SIEM/IDS to verify that all systems are up-to-date and all incidents are being logged, monitored and timely responded to as per policy requirements.</div></div><div><div>
Monitor and evaluate security measures in collaboration with the IT TechOp team to protect against reasonably anticipated threats or hazards to the privacy, security, or integrity of protected information (PII, PCI).</div></div><div><div>
Manage external audits and assessments, oversee audit findings and management actions plans. Ensure corrective actions are taken. Work with risk owners in developing risk treatment plans, time estimations, follow-up and report status on action plans.</div></div><div><div>
Perform tasks as set forth by the management team.</div></div><div><div>
Provide security awareness and compliance trainings to the IT team as well as end-users in line with the PCI-DSS requirements.</div></div></div><div><div><div><br>
<br>
Qualification(s):</div></div><div><div>
Bachelor's Degree in Information Technology or related technical field.</div></div><div><div>
Candidate should have a minimum of 3+ years either Information Security Risk or Cyber Security Risk experience.</div></div><div><div>
Must have knowledge of cloud-based environments (AWS, GCP, Azure, etc.) with cloud governance experience.</div></div><div><div>
Must have experience in working in e-commerce environments and PCI-DSS V3.2.1/4.0.</div></div><div><div>
Sound working knowledge of industry best practices (NIST, ISO, SANS, COBIT) and Legislative and Regulatory and Industry Compliance Requirements (PCI, CCPA, GDPR etc.).</div></div><div><div>
Clear understanding of SDLC process and how Security validation is tied to that.</div></div><div><div>
Must have exceptional written, verbal and presentation communication skills.</div></div><div><div>
Ability to facilitate cross-functional teams.</div></div><div><div>
Ability to translate business requirements into control objectives.</div></div></div><div><div><div>
Strong project management skills.</div></div><div><div><br>
<br>
Good to Have:</div></div><div><ul><li><div>
Experience with PCI-DSS v4.0</div></li></ul></div><div><ul><li><div>
Experience of GRC Tools (such as Service Now, RSA Archer, 6Clicks)</div></li></ul></div><div><div><br>
One or more of the following certifications:</div></div><div><ul><li><div>
ISO 27001 Lead auditor/Implementer</div></li></ul></div><div><ul><li><div>
CISM, CISA and/or CISSP</div></li></ul></div><div><ul><li><div>
CRISC</div></li></ul></div><div><div><br>
<br>
Work Shift Timings:</div></div><div><ul><li><div>
6:00 pm to 3:00 am (Pakistan Standard Time) &ndash; 7:00 am to 4:00 pm (Central Time Zone)</div></li></ul></div></div><div></div><div><br>
Exciting Benefits we offer:</div><ul><li><div>
Market-leading Salary</div></li><li><div>
Medical Coverage &ndash; Self &amp; Dependents</div></li><li><div>
Parents Medical Coverage</div></li><li><div>
Provident Fund</div></li><li><div>
Employee Performance-based bonuses</div></li><li><div>
Home Internet Subsidy</div></li><li><div>
Conveyance Allowance</div></li><li><div>
Profit Sharing Plan [Tenured Employees Only]</div></li><li><div>
Life Benefit</div></li><li><div>
Child Care Facility</div></li><li><div>
Company Provided Lunch/Dinner</div></li><li><div>
Professional Development Budget</div></li><li><div>
Recreational area for in-house games</div></li><li><div>
Sporadic On-shore training opportunities</div></li><li><div>
Friendly work environment</div></li><li><div>
Leave Encashment</div></li></ul><div></div><div><i>
Disclaimer:</i><i> At Contour, we attribute our success to the unique contributions of our diverse staff. We&rsquo;re committed to fostering a culture of respect that thrives on the varied perspectives and experiences of all individuals we recruit, employ, promote, and compensate. Since day one, we&rsquo;ve adhered to a policy that champions a work environment honoring the worth and dignity of each person while being free from all forms of employment discrimination.</i></div><div></div><div><i>
In our continuous effort to promote inclusivity, we extend our commitment to individuals with special needs by providing reasonable accommodations. We actively encourage qualified individuals with special needs to apply for the various openings within our company. Should you require assistance in completing the application process or have any inquiries regarding special facilities, please do not hesitate to contact our HR team. Your unique talents and abilities are welcomed and valued here.</i></div></div><div></div>

GRC Analyst

Knightscope, Inc.

<div><p><b>About Knightscope</b><br>
Knightscope designs and operates Autonomous Security Robots (ASRs) that safeguard people and property around the clock. Our fleet of ASRs combines robotics, edge AI, and cloud services to deliver actionable, real‑time intelligence to clients nation‑wide</p><p></p><p><b><br>
Location:</b> Onsite - Sunnyvale, California HQ <b>(looking for local candidates only)</b></p>
<p><b>
Part Time - Saturdays and Sundays - 10pm - 630am (THIS IS THE ONLY SHIFT AVAILABLE)</b></p><p></p><p><b><br>
Job Summary</b></p>
<p>
The Physical Security Operations Analyst plays a vital role in supporting Knightscope&rsquo;s mission to build the future of security. This position is responsible for monitoring physical security alerts, analyzing data, and delivering timely, accurate reports to both internal teams and external clients. The analyst will help move projects forward, solve problems in real time, and identify and respond to potential security threats while maintaining a strong focus on customer service and operational excellence.</p><br>
<p></p>
<p><b>
Key Responsibilities</b></p>
<ul>
<li>Providing consistent and constant physical security alert and machine monitoring to provide excellent security and customer service resources for Knightscope clients.<br>
</li>
<li>Identifying and solving problems to improve the RTX department</li></ul><br>
<p></p>
<p><b>
Preferred Qualifications</b></p>
<ul>
<li>Experience with security, particularly in a CCTV or technology environment (preferred but not required)</li>
<li>Comfortable in a rapid changing environment</li>
<li>Able to communicate clearly and work well both alone and with others</li>
<li>Background in customer service</li>
<li>Computer and internet proficiency</li>
<li>Flexibility and willingness to cover shifts when needed</li>
<li>Organized, curious, and willing to learn</li>
<li>Comfortable in a rapidly changing environment</li>
<li>A strong desire to help build the future of security</li></ul><br>
<p></p>
<p>
Knightscope embraces diversity and encourages applicants from all different backgrounds to apply. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex or national origin.</p></div>

Risk & Threat Analyst

The Emirates Group

<div><h5 class="jobSectionHeader"><b>Job Purpose
</b></h5><p>Join our Group Security team, where you will contribute to maintaining the highest standards of security across the Emirates Group. Our diverse security units include Security Training, Group Security Command Center, Airport Security Unit, Crime Prevention &amp; Investigation Unit, Threat &amp; Risk Assessment Unit, Aviation Security Compliance, Assurance &amp; Regulation, and Business Support Unit&mdash;all working together to develop and implement comprehensive security strategies.
<br>
If you are passionate about security, risk management, and operational excellence, we invite you to apply and be a part of the Emirates Group Security team. With opportunities across various specialized units, you will gain exposure and contribute to cutting-edge security practices.<br>
<br>
</p><p>As a <b>Security Threat &amp; Risk Specialist </b>in the Emirates Group Security Team, you will lead security risk assessments and recommend mitigation strategies for Emirates Group operations.
<br>
You will investigate and evaluate incidents and security measures, collaborate on crisis plans, providing recommendation to the manager. You will ensure proactive risk management and upholding high security standards company-wide.
<br>
<b>Please note - this is NOT a cybersecurity role; this position will be responsible for physical security.
</b></p><div><p><b>In this role you will:
</b></p><ul><li>Prepare comprehensive data-driven security risk assessments for all aspects of Emirates Group&rsquo;s operation, supported by the analyses conducted by the Threat and Risk Assessment Officers.
</li><li>Recommend and implement highly effective and streamlined mitigation strategies aimed at minimizing residual risk to the Emirates Group's operations efficiently.
</li><li>Liaise with other relevant authorities and outstation staff to investigate incidents which demonstrate potential security vulnerabilities or risks to the Group.
</li><li>Review and rank outstation security audit reports to assess the effectiveness of security measures and controls in mitigating the inherent risk levels and accordingly determine residual risk profiles for each station and country.
</li><li>Perform routine and incident-triggered site visits to high-risk stations to assess the efficacy of deployed mitigation strategies, and foster working relationships with the relevant AVSEC authorities and embassies.
</li><li>Collaborate with various Emirates (EK) departments to create contingency plans tailored for high-risk stations, particularly during periods of active conflict or crises.
</li><li>Provide guidance to other Emirates (EK) departments based on Group Security's assessment and perspective regarding security-related developments and crises.
</li><li>Assume the responsibilities of the Threat and Risk Assessment Manager in their absence, ensuring continuity of operations and efficient execution of tasks within the department.
</li></ul></div><h5 class="jobSectionHeader"><b>Qualification
</b></h5><p><b>To be considered for the role, you must meet below requirements:
</b></p><ul><li>Hold a Bachelor&rsquo;s Degree or Honours (12+3 or equivalent).
</li><li>Have 5+ years experience in Security, Safety, Risk Assessment or Intelligence.
</li><li>Hold strong knowledge of aviation security frameworks and regulations including ICAO, Annex 17, Doc 8973, Doc 10084, etc.
</li><li>Have expertise in Security or Safety Management Systems.
</li><li>Demonstrate proven hands-on experience conducting detailed safety risk assessments.
</li><li>Have the ability to analyse vulnerabilities and assess risks objectively and methodically.
</li><li>Possess knowledge of geo-political developments and regional conflicts.
</li>Be proficient in data analysis, adept at report writing, skilled in effective communication, and meticulous attention to detail.<br>
<li>
<br>
<br>
</li></ul><p><b>You will have an edge if you have:
</b></p><ul><li>Have experience leading and managing teams and inspiring confidence.
</li><li>Possess experience collaborating with law enforcement, government agencies, or intelligence services.
</li></ul><p>At Emirates Group, we&rsquo;re committed to providing our employees with opportunities to grow and develop their careers. If you&rsquo;re looking for a challenging and rewarding opportunity, apply today and join our team!
</p><h5 class="jobSectionHeader"><b>Salary &amp; benefits
</b></h5><p>Join us in Dubai and enjoy an attractive tax-free salary and travel benefits that are exclusive to our industry, including discounts on flights and hotel stays worldwide.
</p><p>Discover what it&rsquo;s like to live and work in our fast-paced, cosmopolitan home city by visiting the Dubai Lifestyle section on our career&rsquo;s website: www.emirates.com/careers .</p></div>

Security Threat & Risk Specialist

Search 10000+ Security risk analyst jobs near you this March. New roles added regularly across leading industries. Apply today.