vendor risk analyst

Vivint

<div>Welcome to the intersection of energy and home services. At NRG, we&rsquo;re driven by our passion to create a smarter, cleaner and more connected future.
Vivint Smart Home, an NRG owned company, is a leading smart home company in the United States, dedicated to redefining the home experience with intelligent products and services. We find purpose in proactively protecting and keeping our customers connected to home, no matter where they are. Join the Smart Home team to create smarter, safer and more sustainable homes. 
Role Summary
In the Age of AI, quality isn&rsquo;t a phase or a team at the end&mdash;it&rsquo;s a capability built in by design. We&rsquo;re seeking a Director of Quality Engineering (QE) to lead our transformation from traditional manual QA to a developer‑centric, AI‑augmented, risk‑based QE model across multiple product verticals (mobile apps, device/firmware, and platform/services). This leader partners closely with Engineering, Product, Release, and our Vertical Quality Leads (VQLs) to prevent defects early, accelerate flow, and raise the bar on reliability, accessibility, and customer trust. You will redefine culture, talent, tooling, and metrics&mdash;owning the strategy, operating model, and outcomes that make &ldquo;quality everyone&rsquo;s job,&rdquo; with QE as the architects of prevention and stewards of risk. 
What You&rsquo;ll Do<div><ul><li>
Cultural reset: Gatekeepers Architects</li></ul><div><ul><li>
Re‑author the mission of quality from find bugs to prevent defects and accelerate delivery; codify behaviors, responsibilities, and rituals that embed quality at design time. Leverage VQLs (Principal Quality Leads) to represent vertical quality in executive forums and drive collective accountability across disciplines including in Product, Engineering, etc.</li><li>
Establish a Team One operating model: co‑locate QEs within product squads; ensure participation in discovery, architecture reviews, threat modeling, and risk sizing&mdash;not just release checkpoints.</li></ul></div></div><div><ul><li>
Talent strategy: Upskill for AI‑augmented QE</li></ul><div><ul><li>
Build a competency framework and learning paths for three personas: Builders (QE Leads with strong coding), Domain Strategists (deep product knowledge + exploratory excellence), and Legacy Testers (with targeted transition plans).</li><li>
Deploy AI‑augmented workflows (prompting patterns for test generation, test‑data synthesis, and log/trace analysis) so engineers focus on logic and risk.</li><li>
Strong technical background to partner with Engineering and the Automation Director (e.g., understanding when and why frameworks like Playwright/Cypress/Appium are used), without needing to design or write automation. Able to guide quality strategy, risk-based coverage, and AI‑augmented QE practices across verticals.</li></ul></div></div><div><ul><li>
Shift‑left (for real) &amp; SDLC integration</li></ul><div><ul><li>
Pre‑commit quality: Require test hooks/observability points at design time; QEs help define seams for automation and telemetry before a line of code is written.</li><li>
AI policy in PRs: Configure AI‑assisted static checks and PR gates for reliability/maintainability rules; QEs own guardrail policies and exemptions.</li><li>
Definition of Done 2.0: A story is done only when automated checks (unit/component/E2E where appropriate), AI‑generated edge‑case coverage, and accessibility baselines are in place and green. QE/VQLs co‑own release criteria and QRDs.</li></ul></div></div><div><ul><li>
Platform &amp; tooling: Self‑healing, evidence‑driven</li></ul><div><ul><li>
Stand up an AI‑native test platform (visual AI/self‑healing selectors, change‑impact analysis, and intelligent retries) to reduce maintenance toil and flakiness.</li><li>
Synthetic data at scale: Provide compliant, scenario‑rich datasets instantly to eliminate environment/data bottlenecks.</li><li>
Standardize ALM/test management (Jira + Xray/TestRail/Zephyr), dashboards, and evidence discipline (traceability, result artifacts) across verticals and vendor teams.</li></ul></div></div><div><ul><li>
Observability &amp; Release governance</li></ul><div><ul><li>
Instrument quality telemetry (test effectiveness, Defect Removal Efficiency/escapes, defect rate, cycle time, change failure rate) and run release readiness reviews with VQLs, Functional Managers, and Release Managers.</li><li>
Drive corrective and preventive actions when quality telemetry trends against set standards; ensure audit‑ready traceability and evidence.</li></ul></div></div><div><ul><li>
VQL partnership &amp; Vertical leadership</li></ul><div><ul><li>
Co‑author Vertical Quality Plans with VQLs: risk models, KPIs, and release criteria per domain; act as an escalation point for cross‑vertical quality risks.</li><li>
Represent vertical quality in executive forums, enabling transparent trade‑offs and clear go/no‑go calls with defensible evidence.</li></ul></div></div><div><ul><li>
Vendor effectiveness &amp; operating cadence</li></ul><div><ul><li>
Define playbooks, SLAs, and calibration for partner teams; ensure consistent standards, tooling hygiene, and audit readiness.</li><li>
Run a Lean &ldquo;waste audit&rdquo; cadence to quantify maintenance toil (flaky tests, environment issues, data waits) and redirect capacity via AI/platform improvements.</li></ul></div></div> 
How You&rsquo;ll Measure Success (KPIs)<ul><li>
Escaped Defect Rate (EDR) trending down across verticals; Defect Removal Efficiency (DRE) trending up.</li>
Cycle time (Commit<li> Deploy) reduced without eroding reliability; improved change failure rate (CFR) and MTTR due to better prevention and faster diagnosis.</li><li>
Automation coverage vs. risk: Coverage is targeted to high‑value, high‑risk paths&mdash;not &ldquo;test everything.&rdquo;</li><li>
Accessibility conformance baselines and improvement per release (Section 508/WCAG 2.2 AA).</li><li>
Signal quality of dashboards: fewer flaky tests, higher pass‑rate integrity, actionable reports in Jira/Xray/TestRail with clear traceability to requirements and risks.</li></ul> 
Required Qualifications<ul><li>
12+ years in Software Quality/Engineering with 5+ years leading multi‑team or multi‑product quality organizations, ideally in consumer, IoT, or device‑cloud ecosystems.</li>
Demonstrated success transforming QA<li> QE: culture change, org design, upskilling, platform/tooling modernization, and KPI re‑architecture.</li><li>
Expertise in risk‑based test strategy, exploratory testing, AI‑assisted test development, and integrating quality signals across CI/CD. Owns release criteria/QRDs and go/no‑go rigor with VQLs/Functional Managers/Automation Leads/Release Management.</li><li>
Familiarity with modern test frameworks and languages (e.g., Playwright/Cypress, WebDriver/Appium; TypeScript/JavaScript, Python, or Java).</li><li>
Strong command of ALM/test management (Jira, Xray/TestRail/Zephyr) and evidence/traceability practices; vendor management with measurable outcomes.</li><li>
Proven ability to instrument and interpret telemetry (logs, traces, metrics), and to partner with SRE/Platform for observability.</li><li>
Bachelor&rsquo;s degree in an Engineering discipline (e.g., Computer Science, Computer Engineering, Electrical/Computer Engineering, or related field). Advanced degree a plus.</li></ul> 
Preferred Qualifications &amp; Credentials<ul><li>
ISTQB Advanced Level (Test Manager, Test Analyst, or Technical Test Analyst) and/or Certified Software Quality Analyst (CSQA).</li><li>
Agile certifications (CSM, PSM) and/or scaled frameworks (SAFe).</li><li>
Lean Six Sigma (Green/Black Belt) with demonstrated use in reducing waste and cycle time.</li><li>
Accessibility expertise with working knowledge of WCAG 2.2 AA and Section 508, including tooling (e.g., axe, Lighthouse, NVDA/JAWS, VoiceOver).</li><li>
Familiarity with AI/ML in testing (e.g., self‑healing locators, test generation, change impact analysis) and responsible AI guardrails for PR checks.</li><li>
Experience in regulated or security‑sensitive domains; knowledge of secure SDLC, privacy, and compliance best practices.</li></ul> 
Ways of Working<ul><li>
Operates as a servant‑leader who builds psychological safety while setting a high bar for engineering rigor and accountability.</li><li>
Communicates crisply with executives and engineers alike; translates telemetry into decisions and clear trade‑offs.</li><li>
Drives an inspect‑and‑adapt cadence: quarterly Vertical Quality Plans, monthly waste audits, weekly signal reviews, and daily squad rituals.</li></ul> 
Location &amp; Work Model<ul><li>
In office, Lehi, UT, with periodic travel to key engineering hubs (as needed for planning, release readiness reviews, and vendor calibration).</li></ul> 
Equal Opportunity Employer
Vivint Smart Home, an NRG company, is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. 
If you reside in or intend to work remotely from California, Colorado, Connecticut, Hawaii, Illinois, Minnesota, Nevada, New York, Ohio, Washington D.C., Washington State or another state or locality with a pay transparency law, you may contact Careers@nrg.com for compensation information related to this position and other information as required by applicable law. Please include the job title in your request. 


NRG Energy is committed to a drug and alcohol-free workplace. To the extent permitted by law and any applicable collective bargaining agreement, employees are subject to periodic random drug testing, and post-accident and reasonable suspicion drug and alcohol testing. EOE AA M/F/Vet/Disability. Level, Title and/or Salary may be adjusted based on the applicant's experience or skills.
Official description on file with Talent.</div>

Director, Quality Engineering

Chronos Information Technology

The Cyber Exposure &amp; Security Testing Analyst is responsible for identifying, analyzing, and validating cyber risks affecting complex and globally distributed digital ecosystems. This is a multidisciplinary role that combines cyber threat intelligence, external attack surface discovery, open-source intelligence (OSINT), and controlled security testing to provide a unified and context-aware understanding of an organization's external cyber exposure. The analyst will investigate digital footprints, monitor underground cyber ecosystems for targeted threats, discover internet-facing assets, and perform controlled, safety-aware security testing to validate exposure pathways. The environments assessed may include enterprise infrastructure, cloud services, automation platforms, connected devices, remote access environments, and vendor ecosystems across multiple industries. This is an investigative role for a curious and analytical security professional who is driven to uncover not just vulnerabilities, but the complete attack chain &mdash; from attacker reconnaissance through to the realistic impact of a potential breach. The role works closely with system integrators, infrastructure teams, and clients to produce intelligence that is actionable, contextually accurate, and clearly communicated. Analysts in this role are expected to think like adversaries, understanding how attackers discover, evaluate, and exploit exposed systems in real-world environments.ROLE FOCUSThis role is intelligence-first and testing-second, but both capabilities are essential. The primary skill set is analytical &mdash; the ability to gather, correlate, and contextualize intelligence from multiple sources. Security testing is used to validate intelligence findings and confirm real-world exposure risk, rather than serving as the sole output of the role.KEY RESPONSIBILITIESThreat Intelligence Monitoring: Monitor global cyber threat intelligence sources to identify threats affecting connected environments and digital infrastructure.Activities include:<ul><li>monitoring underground forums, marketplaces, and credential trading communities</li><li>tracking initial access broker activity</li><li>analyzing breach intelligence datasets and credential leaks</li><li>monitoring infostealer malware logs</li><li>identifying emerging threats targeting internet-exposed systems</li></ul>Intelligence sources may include open-source intelligence platforms, internet telemetry datasets, breach intelligence repositories, and security research communities. The analyst will produce periodic intelligence briefings summarising relevant risks and trends in a format accessible to both technical and non-technical stakeholders.External Attack Surface Discovery Identify and map all internet-visible infrastructure associated with monitored environments. Activities include:<ul><li>discovering domains and subdomains</li><li>mapping exposed IP infrastructure</li><li>identifying exposed services and administrative interfaces</li><li>monitoring certificate transparency logs</li><li>conducting passive DNS analysis</li><li>identifying exposed cloud services and SaaS platforms</li><li>detecting shadow IT, forgotten assets, and infrastructure introduced through third-party integrations</li></ul>The analyst will analyse attacker discovery pathways and potential exploitation vectors to develop a realistic view of the organisation&rsquo;s external exposure.Security Testing &amp; Exposure ValidationConduct controlled and non-disruptive security testing to validate the real-world risk of exposures identified through intelligence monitoring and attack surface discovery. Activities include:<ul><li>reconnaissance and infrastructure discovery</li><li>identification and validation of vulnerabilities and security misconfigurations</li><li>validation of exposed services and authentication mechanisms</li><li>verification of publicly accessible attack pathways</li></ul>All testing activities are performed within defined scope and authorisation, with priority given to operational safety. Particular care is taken when assessing production environments where operational continuity and safety are critical.Digital Footprint &amp; OSINT InvestigationInvestigate the digital footprints of organisations and individuals connected to monitored environments. Activities include:<ul><li>open-source intelligence research</li><li>digital footprint mapping</li><li>corporate entity identification</li><li>identity exposure analysis</li><li>correlation of public intelligence with discovered infrastructure</li></ul>This contextual intelligence improves the accuracy and relevance of exposure analysis.Identity Exposure &amp; Credential IntelligenceIdentify indicators of potential identity compromise affecting monitored personnel, vendors, or organizations. Activities include:<ul><li>breach intelligence monitoring</li><li>credential reuse analysis</li><li>detection of exposed authentication tokens</li><li>correlation of identity exposure with potential access pathways</li></ul>All findings are validated before escalation to minimise false positives.CORE COMPETENCIES &amp; TECHNICAL FOUNDATIONSCandidates should demonstrate practical capability in the following areas through professional work, independent research, or a combination of both.Threat Intelligence AnalysisExperience analysing cyber threats from sources such as underground forums, breach datasets, and threat intelligence feeds.Ability to distinguish signal from noise and produce concise, actionable intelligence summaries.Attack Surface DiscoveryExperience discovering and mapping external infrastructure using techniques such as:<ul><li>internet scanning platforms</li><li>passive DNS analysis</li><li>certificate transparency monitoring</li><li>infrastructure reconnaissance</li></ul>Ability to identify exposed services, misconfigured interfaces, and shadow IT assets.OSINT Investigation AbilityConduct open-source intelligence investigations to map digital footprints, identify corporate structures, and gather contextual intelligence about organisations and individuals.Familiarity with OSINT frameworks and investigative methodologies.Security Testing &amp; Validation ExperienceIdentifying and validating vulnerabilities and misconfigurations across web services, exposed infrastructure, and authentication mechanisms. Strong understanding of safe, non-disruptive testing methodologies.Technical FoundationsStrong understanding of:<ul><li>DNS architecture</li><li>IP networking</li><li>web application fundamentals</li><li>cloud service infrastructure</li></ul>Ability to interpret certificate data, infrastructure configurations, and network behaviourAnalytical &amp; Communication SkillsAbility to:<ul><li>correlate intelligence from multiple sources</li><li>identify emerging cyber risk patterns</li><li>translate technical findings into clear risk narratives</li><li>communicate complex issues to non-technical stakeholders</li></ul>Strong written communication is essential.CERTIFICATIONCertifications like OSCP, GIAC GPEN, GXPN, CREST CCT is highly preferable for right candidate we are ready to sponsorPREFERRED TECHNICAL BACKGROUNDThe following technical exposures are advantageous but not required:<ul><li>connected devices and IoT ecosystems</li><li>automation or control environments</li><li>satellite or remote connectivity infrastructure</li><li>cloud and SaaS security exposure analysis</li><li>vendor access ecosystems and supply chain risk</li></ul>Experience with scripting or automation (Python, Bash, or similar) for reconnaissance or intelligence processing is beneficial.RESEARCH PORTFOLIO &amp; EVIDENCE OF WORK:Candidates are encouraged to share examples of investigative or technical work demonstrating curiosity and analytical capability. Examples include:<ul><li>security research blogs or technical write-ups</li><li>OSINT investigations or intelligence reports</li><li>vulnerability research or attack surface discovery projects</li><li>GitHub repositories related to security research or automation</li><li>conference talks, presentations, or training material</li><li>original tools or scripts for reconnaissance or analysis</li></ul>Independent research and experimentation are viewed as strong positive indicators.Job Types: Full-time, Permanent

Cyber Exposure & Security Testing Analyst

Strategic Mindz LLC

<div><div><div>About the Opportunity 
We are seeking an experienced IV&amp;V Analyst &ndash; Testing Subject Matter Expert (SME) to support a large-scale government system modernization initiative. This role is focused on providing independent testing oversight, ensuring quality, risk mitigation, and alignment with project objectives. The role is primarily remote, but there may be occasional on-site presence required only as needed. 
</div><div>This project involves modernization of a complex enterprise system using a hybrid Agile SDLC and Application Lifecycle Management (ALM) tools. Current phases include:</div>
<ul> <li>Systems Integration Testing (SIT)</li>
<li> Data Migration &amp; Conversion</li>
<li> User Acceptance Testing (UAT)</li>
</ul><div>Position Overview</div>
<div>The IV&amp;V Analyst will play a critical role in evaluating testing processes, validating system functionality, and ensuring that deliverables meet defined standards and expectations. This role requires strong analytical thinking, attention to detail, and experience working within complex, multi-stakeholder environments. 
</div><div>Key Responsibilities</div>
<ul> <li>Review and assess test plans and test case specifications to ensure adherence to testing standards and methodologies</li>
<li> Analyze test requirements and determine appropriate test coverage</li>
<li> Monitor execution of test cases to validate system functionality</li>
<li> Evaluate, document, and report test results, defect status, and testing trends</li>
<li> Prepare and deliver regular status reports on testing progress and performance metrics</li>
<li> Identify testing risks and contribute to mitigation strategies</li>
<li> Support analysis of defects and enhancements in collaboration with project leadership</li>
<li> Participate in design, development, and testing meetings as needed</li>
<li> Assess vendor work breakdown structures (WBS) for accuracy and consistency</li>
<li> Support User Acceptance Testing (UAT) by validating and prioritizing stakeholder requirements</li>
<li> Assist with reporting, presentations, and stakeholder communication</li>
<li> Perform additional duties as assigned</li>
</ul><div>Required Qualifications</div>
<ul> <li>Experience writing test scenarios, detailed test cases, and test scripts based on user stories</li>
<li> Experience testing web-based applications, including business rules and validations</li>
<li> Strong experience analyzing and reporting on testing trends and performance in Agile or hybrid environments</li>
<li> Hands-on experience with Application Lifecycle Management (ALM) tools (e.g., Azure DevOps, Jira)</li>
<li> Understanding of the defect lifecycle and defect tracking processes</li>
<li> Experience supporting User Acceptance Testing (UAT) and requirements traceability</li>
<li> Familiarity with schedule management tools such as Microsoft Project</li>
<li> Strong analytical, problem-solving, and critical thinking skills
</li> <li>Excellent written and verbal communication skills
</li> <li>Proficiency in Microsoft Office Suite (Word, Excel, PowerPoint, Visio, Teams, Project)</li>
</ul><div>Preferred Qualifications</div>
<ul> <li>Experience working on government or large-scale system modernization projects
</li> <li>Understanding of Workers&rsquo; Compensation or similar regulatory business processes
</li> <li>Degree in Computer Science, Software Engineering, or related field
</li>
</ul></div>Flexible work from home options available.</div>

IV&V Analyst – Testing SME

<div>Line of Service
Advisory
Industry/Sector
Technology
Specialism
Advisory - Other
Management Level
Manager
Job Description &amp; Summary
PwC is seeking a PMIS Business Analyst to support large-scale capital projects and infrastructure programs in designing and implementing enterprise Project Management Information Systems (PMIS).
 
 
The role focuses on aligning project controls, PMO governance, and digital platforms (e.g., Primavera Unifier, P6, ERP integrations) to enable effective cost, schedule, risk, and contract management across complex portfolios.
Key Responsibilities
Business Analysis &amp; Requirements
 <ul><li>Elicit, analyze, and document business requirements through workshops, interviews, and process reviews
</li></ul> <ul><li>Translate business needs into functional and non-functional system requirements
</li></ul> <ul><li>Develop and maintain documentation such as BRDs, SRS, user stories, process maps, and solution design documents
</li></ul> <ul><li>Perform gap analysis between current and future-state processes
</li></ul>PMIS Design &amp; Configuration
 <ul><li>Support and/or lead configuration of PMIS platforms (e.g., Primavera Unifier, P6, Aconex, CostOS)
</li></ul> <ul><li>Design workflows, business processes, cost templates, and approval structures
</li></ul> <ul><li>Define data structures, forms, and governance frameworks
</li></ul> <ul><li>Support deployment of PMIS across projects and departments
</li></ul>System Integration &amp; Data Management
 <ul><li>Coordinate integrations between PMIS and enterprise systems (ERP, scheduling tools, document management systems)
</li></ul> <ul><li>Support data migration, validation, and quality assurance
</li></ul> <ul><li>Ensure data accuracy, governance, and compliance standards
</li></ul>Testing &amp; Deployment
 <ul><li>Develop test scenarios and support system testing
</li></ul> <ul><li>Lead or support User Acceptance Testing (UAT)
</li></ul> <ul><li>Manage defect tracking and resolution coordination
</li></ul> <ul><li>Support go-live activities and stabilization
</li></ul>Reporting &amp; Performance Insights
 <ul><li>Define and develop dashboards and KPIs (e.g., Power BI or native PMIS reporting tools)
</li></ul> <ul><li>Support executive and operational reporting needs
</li></ul> <ul><li>Ensure alignment of reporting structures with governance frameworks
</li></ul>Stakeholder &amp; Vendor Management
 <ul><li>Act as liaison between business users, IT teams, and external vendors
</li></ul> <ul><li>Support vendor coordination and issue resolution
</li></ul> <ul><li>Facilitate workshops and governance meetings
</li></ul> <ul><li>Provide advisory support on PMIS best practices
</li></ul>Adoption &amp; Continuous Improvement
 <ul><li>Support change management and user onboarding
</li></ul> <ul><li>Develop and deliver user training sessions
</li></ul> <ul><li>Identify opportunities for system enhancements and process optimization
</li></ul> <ul><li>Contribute to digital transformation initiatives
</li></ul>Systems &amp; Tools Exposure (One or More)
 <ul><li>Oracle Primavera Unifier
</li></ul> <ul><li>Primavera P6 EPPM
</li></ul> <ul><li>Aconex
</li></ul> <ul><li>CostOS
</li></ul> <ul><li>ERP systems (SAP, Oracle, MS Dynamics, etc.)
</li></ul> <ul><li>Reporting tools (Power BI, BI platforms)
</li></ul>Core Competencies
 <ul><li>Strong business analysis and documentation skills
</li></ul> <ul><li>Understanding of project lifecycle and project controls (cost, schedule, change, risk)
</li></ul> <ul><li>Process mapping and governance alignment
</li></ul> <ul><li>Analytical and problem-solving mindset
</li></ul> <ul><li>Stakeholder communication and facilitation skills
</li></ul> <ul><li>Understanding of system configuration concepts
</li></ul> <ul><li>Attention to detail and data accuracy
</li></ul><div></div>Qualifications
 <ul><li>Bachelor&rsquo;s degree in Engineering, Construction Management, Information Systems, Business, or related field
</li></ul> <ul><li>Relevant certifications are advantageous (PMP, CBAP, Primavera certifications, Agile, ITIL, etc.)
</li></ul>Experience &amp; Skills
<ul><li>5+ years&rsquo; experience in PMIS, project controls, or capital project digital transformation.
</li><li>Experience with Primavera Unifier, Primavera P6, or equivalent PMIS platforms.
</li><li>Strong understanding of cost control, scheduling, change management, contracts, and risk processes.
</li><li>Experience working with ERP integrations and enterprise reporting environments.
</li><li>Strong stakeholder management and workshop facilitation skills.
</li></ul>Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required:
Degrees/Field of Study preferred:
Certifications (if blank, certifications not specified)
Required Skills
Optional Skills
Accepting Feedback, Accepting Feedback, Active Listening, Agile Methodology, Analytical Thinking, Business Case Development, Business Process Improvement, Change Control Processes, Coaching and Feedback, Communication, Costing, Creativity, Embracing Change, Emotional Regulation, Empathy, Inclusion, Intellectual Curiosity, IT Project Lifecycle, Kanban (Project Management), Learning Agility, Optimism, Plan of Action and Milestones (POA&amp;M), Process Mapping, Process Standardization, Professional Courage {+ 28 more}
Desired Languages (If blank, desired languages not specified)
Travel Requirements
Not Specified
Available for Work Visa Sponsorship?
No
Government Clearance Required?
No
Job Posting End Date</div>

ETIC, PMIS - Business Analyst - Manager

Scotiabank

<div>Requisition ID: 256347
Salary Range: -
Please note that the Salary Range shown is a guideline only. Salary offered may vary based on factors, including, but not limited to, the successful candidate&rsquo;s relevant knowledge, skills, and experience. 
Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture. 
Global Banking and Markets 
Global Banking and Markets (GBM) is a leading Canadian Capital Markets and Investment Banking business with a growing platform in the US and Latin America, operating globally for over 100 years. Scotiabank&rsquo;s strong U.S. presence provides our clients an important bridge to this key global market for trade and investment flows across the Americas and the world.
Global Banking &amp; Markets provides a full range of investment banking, credit and risk management products and services relevant to the financing and strategic development needs of our clients. Our products include debt and equity financing, mergers &amp; acquisitions, corporate banking, institutional equity sales, trading and research, fixed income products, derivatives, energy, foreign exchange and precious &amp; metals. We also cross-sell the full range of wholesale products and services offered by the Scotiabank Group.
Be part of an innovative, Global Capital Markets and Investment Banking business with a unique geographic footprint that puts capital to work for our clients across industries! We work together to drive ambition for every future! 
Purpose 
The Analyst, GBM AML and Sanctions Risk Assessment, contributes to the overall success of the GBM Risk Assessment team, supporting the strategic execution and continuous enhancement of AML and Sanctions risk assessment activities across Global Banking and Markets (GBM) and Global Transaction Banking (GTB). The Analyst will support the AML and Sanctions Risk Assessment Team by acquiring, ingesting, and harmonizing client, product, geography, and sanctions risk data elements from multiple sources across the Bank, including AML Data Governance, Client Onboarding, Enterprise Data Lake, Middle Office, Technology Teams, and the Business (when necessary), This role is critical to building accurate inherent risk profiles for in-scope Assessment Units as part of the annual risk assessment process.
The successful candidate will demonstrate strong proficiency in Excel, including pivot tables, macros, and vlookups, to extrapolate and reconcile data from diverse sources into cohesive analytic outputs. These outputs will provide visibility into risk profiles and emerging trends, enabling the team to move beyond surface metrics and deliver management with a clear understanding of current and evolving risk dynamics.
In addition, the Analyst will leverage PowerPoint to create charts and diagrams that effectively convey complex risk views, ensuring inherent risk profiles are presented in a manner that is accessible, insightful, and actionable for senior stakeholders. 
What You'll Do<ul><li> 
Support the annual ML/TF and Sanctions Risk Assessment by coordinating with in-scope business units across the global footprint and engaging with regional compliance teams to ensure consistency, accuracy, and timely delivery of results.</li><li>Collect, analyze, and harmonize client, product, and geographic data in alignment with guidance from the Risk Assessment Team and the established methodology and procedures document, ensuring data integrity and defensibility.</li><li>Codify and document data acquisition processes within a newly established data procedures manual, capturing background, steps, and rationale to deliver transparency across the end-to-end process and enable 2nd Line Testing to review and validate the approach.</li><li>Analyze identified issues, trends, and risks with a resolution-oriented mindset, coordinating appropriate responses based on established criteria and escalating where necessary to strengthen program resilience.</li><li>Support the AML Governance Team during regulatory exams by preparing and delivering exam responses, particularly where inquiries focus on inherent risk surveys and data for in-scope Assessment Units.</li><li>Identify and articulate risk assessment findings and observations through data analytics and reviews, creating a clear vision for management that highlights gaps, oversights, and opportunities for remediation to reinforce the control framework.</li><li>Review and validate risk outputs and control effectiveness assessments to ensure accuracy, reliability, and alignment with program standards.</li><li>Contribute to the continuous enhancement of the Risk Assessment Methodology and Procedures, integrating industry and regulatory best practices to maintain defensibility and relevance.</li><li>Support the quarterly risk assessment development and execution process, incorporating client risk rating data from Onboarding, synthesizing issues management data, and integrating perspectives from the BSA/AML Officer to provide a holistic view of risk.</li><li>Collaborate on New Product Initiative reviews and assessments, ensuring risk assessments are fully informed by data provided throughout the process and aligned with program standards.</li><li>Support risk assessments for new products, services, and vendor relationships across the global footprint, ensuring comprehensive coverage and defensible outcomes.</li><li>Build and sustain trust-based relationships with partner groups and cross-functional data teams including Finance, Technology, Middle Office, and Data Governance, fostering collaboration and a cooperative spirit to meet data requirements for the annual risk assessment process.</li><li>Actively pursues effective and efficient operations of his/her respective areas in accordance with Scotiabank&rsquo;s Values, its Code of Conduct and the Global Sales Principles, while ensuring the adequacy, adherence to and effectiveness of day-to-day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions and conduct risk.</li><li>Champions a high-performance environment and contributes to an inclusive work environment.</li></ul> 
What You'll Bring<ul><li> 
Minimum of 1-3 years in financial services operations and AML/ATF compliance;</li><li>Minimum Bachelor&rsquo;s degree in business, related field or equivalent experience;</li><li>ACAMS certified preferred;</li><li>Spanish and/or Portuguese speaking strongly preferred;</li><li>Strong communications, analytical and organizational skills;</li><li>Knowledge of GBM and GTB businesses (including capital markets), products, operations, systems, and organization; and</li><li>Knowledge of AML/ATF regulatory requirements and expectations.</li><li>Efficient, and organized, with some experience in conducting multi-stakeholder project plans initiatives for similarly sized foreign financial institutions, with a specialization in global banking.</li><li>Ability to work independently and cooperatively as a team</li><li>Good problem-solving and time management skills</li><li>Excellent flexibility and change management skills</li><li>Demonstrates interest to learn</li></ul> 
Interested? 
If your experience is closely related but doesn&rsquo;t align perfectly with every qualification, we do encourage you to apply - you might be the right candidate for this or other roles at Scotiabank!
At Scotiabank, every employee is empowered to reach their fullest potential, respected for who they are and, embraced for their differences. That&rsquo;s why we work to grow and diversify talent and engage employees in a performance-oriented culture. 
What's in it for you? 
Scotiabank wants you to be able to bring your best self to work &ndash; and life, every day. With a focus on holistic well-being, our many flexible benefit programs are designed to help support your unique family, financial, physical, mental, and social health needs. 
#Dallas
#GBM
Location(s): United States : Texas : Dallas
Scotiabank is a leading bank in the Americas. Guided by our purpose: &quot;for every future&quot;, we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.
At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted. 
 
Scotiabank is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other characteristic protected by federal, state, or local law.</div>

Analyst, GBM AML Risk Assessment

Department Of Family And Protective Services

<div><div>The Texas Department of Family and Protective Services (DFPS) works to build on strengths of families and communities to keep children and vulnerable adults safe, so they thrive. We do this through investigations, services, and referrals.</div><div></div><div> 
What You Get Beyond Your Paycheck</div><div>
When you join the State of Texas, your monthly paycheck is just one part of your real income. Our benefits provide extra value that many private employers simply don&rsquo;t match&mdash;often adding hundreds of dollars each month to what you take home or save.</div><div></div><div> 
Here&rsquo;s what you get as a full-time employee:</div><ul><li>
100% paid health insurance for you, and 50% paid for eligible family members&mdash;saving you hundreds every month in out-of-pocket medical costs</li><li>
Retirement plans with lifetime monthly payments after five years of state service, plus options to save even more with 401(k) and 457 plans</li><li>
Paid vacation, holidays, and sick leave so you can recharge and take care of life outside work (that&rsquo;s time off you&rsquo;re actually paid for)</li><li>
Optional dental, vision, and life insurance&mdash;at rates much lower than most private plans</li><li>
Flexible spending accounts for added tax savings on health and dependent care</li><li>
Employee discounts on things like gym memberships, electronics, and entertainment</li></ul><div></div><div> 
You also might qualify for Public Service Loan Forgiveness, which could help you pay off federal student loans faster.</div><div>
You can see all the details here: ERS recruitment brochure</div> 
Functional Title: Cybersecurity Analyst II 
Job Title: Cybersecurity Analyst II 
Agency: Dept of Family &amp; Protectve Svc 
Department: Chief Inf Security Office-Op 
Posting Number: 15583 
Closing Date: 10/01/2026 
Posting Audience: Internal and External 
Occupational Category: Computer and Mathematical 
Salary Range: $5,797.66 - $9,508.25 
Pay Frequency: Monthly 
Salary Group: TEXAS-B-25 
Shift: Day 
Additional Shift: 
Telework: Eligible for Telework 
Travel: Up to 5% 
Regular/Temporary: Regular 
Full Time/Part Time: Full time 
FLSA Exempt/Non-Exempt: Exempt 
Facility Location:
 
Job Location City: AUSTIN 
Job Location Address: 4900 N LAMAR BLVD 
Other Locations: Abilene; Alamo; Alice; Alpine; Alvin; Amarillo; Anahuac; Andrews; Angleton; Anson; Aransas Pass; Archer City; Arlington; Athens; Atlanta; Austin; Bacliff; Ballinger; Bandera; Bastrop; Bay City; Baytown; Beaumont; Bedford; Beeville; Bellville; Big Spring; Boerne; Bonham; Borger; Bowie; Brady; Breckenridge; Brenham; Brownfield; Brownsville; Brownwood; Bryan; Burnet; Caldwell; Cameron; Canton; Canutillo; Carlsbad; Carrizo Springs; Carrollton; Carthage; Center; Centerville; Childress; Clarksville; Cleburne; Cleveland; Coldspring; Columbus; Conroe; Copperas Cove; Corpus Christi; Corsicana; Crockett; Crosby; Crystal City; Cuero; Cypress; Daingerfield; Dallas; Decatur; Del Rio; Denton; Dickinson; Dumas; Duncanville; Eagle Pass; Eastland; Edinburg; El Paso; Elgin; Elsa; Ennis; Fabens; Falfurrias; Floresville; Fort Stockton; Fort Worth; Fredericksburg; Gainesville; Galveston; Garland; Gatesville; Georgetown; Giddings; Gilmer; Goliad; Gonzales; Graham; Granbury; Grand Prairie; Grapevine; Greenville; Hallettsville; Hamilton; Harlingen; Haskell; Hearne; Hemphill; Hempstead; Henderson; Hereford; Hillsboro; Hondo; Houston; Humble; Huntsville; Hurst; Irving; Jacksonville; Jasper; Johnson City; Jourdanton; Karnes City; Katy; Kaufman; Kerrville; Killeen; Kingsville; Kingwood; Kirbyville; La Grange; Lake Jackson; Lake Worth; Lamesa; Lampasas; Lancaster; Laredo; Levelland; Lewisville; Liberty; Linden; Littlefield; Livingston; Llano; Lockhart; Longview; Lubbock; Lufkin; Lumberton; Madisonville; Marble Falls; Marfa; Marlin; Marshall; Mcallen; Mckinney; Mercedes; Meridian; Mesquite; Mexia; Midland; Mineola; Mineral Wells; Mission; Monahans; Mount Pleasant; Mount Vernon; Nacogdoches; Navasota; New Boston; New Braunfels; Odessa; Orange; Palestine; Pampa; Paris; Pasadena; Pearland; Pearsall; Pecos; Perryton; Pharr; Pittsburg; Plainview; Plano; Pollok; Port Arthur; Port Lavaca; Presidio; Quitman; Raymondville; Refugio; Richardson; Richmond; Rio Grande City; Robstown; Rockwall; Rosenberg; Round Rock; Rowlett; Rusk; San Angelo; San Antonio; San Benito; San Juan; San Marcos; San Saba; Schertz; Seguin; Seminole; Seymour; Sherman; Silsbee; Sinton; Snyder; Socorro; Sonora; South Houston; Stephenville; Sugar Land; Sulphur Springs; Sweetwater; Taylor; Temple; Terrell; Texarkana; Texas City; The Woodlands; Tomball; Trinity; Tyler; Uvalde; Van Horn; Vernon; Victoria; Waco; Washington; Watauga; Waxahachie; Weatherford; Webster; Weslaco; Wharton; Wichita Falls; Woodville; Zapata 
MOS Codes: 0605,0630,0631,0639,0670,0679,0681,1702,1705,1710,1720,1721,1799,2611,2659,8055,8858,14N,14NX,170A 
170B,17A,17B,17C,17C0,17DX,17S,17SX,17X,181X,182X,183X,184X,1B4X1,1D7X1,1N4X1,255A,255N,255S,25B,25D 
26A,26B,26Z,514A,5C0X1D,5C0X1N,5C0X1R,5C0X1S,5IX,681X,682X,683X,781X,782X,783X,784X,CTI,CTM,CTR,CWT 
CYB10,CYB11,CYB12,CYB13,CYB14,IS,ISM,ISS,IT,ITS 

Brief Job Description:
As a Cybersecurity Analyst II at the Texas Department of Family and Protective Services (DFPS) you will have at least one to two (1-2) years of related experience and be responsible for supporting the agency&rsquo;s Governance, Risk, and Compliance (GRC) program by monitoring and assessing applicable cybersecurity, privacy, and regulatory requirements to mitigate potential risks and ensure adherence to industry standards.
The Cybersecurity Analyst II will help perform risk assessments, support audits, and develop and maintain security policies and procedures. The Cybersecurity Analyst II will collaborate with departments, stakeholders, and external partners to maintain a comprehensive GRC program that supports the agency&rsquo;s strategic objectives. This role applies professional knowledge of cybersecurity frameworks and compliance requirements to perform moderately complex assignments with increasing independence.
How you will make an impact<ul><li>
Assist the Director of Security GRC and GRC Lead in developing, reviewing, and maintaining an enterprise-wide governance, risk management, and compliance program, aligning it with the agency&rsquo;s goals and objectives.</li><li>
Ensure policies, procedures, and controls comply with legal and regulatory requirements, industry standards, and best practices.</li><li>
Conduct and document risk assessments of information systems, vendors, and business processes to identify vulnerabilities, assess the impact of risks, and recommend mitigation strategies.</li><li>
Track and report on identified risks and mitigation strategies.</li><li>
Support the organization&rsquo;s risk register and help business units develop remediation plans.</li><li>
Monitor compliance with internal policies and state regulatory requirements.</li><li>
Support internal and external audit activities, including evidence collection and gap remediation.</li><li>
Assist with regulatory reporting and compliance attestations.</li><li>
Contribute to the development and delivery of role-based security awareness and compliance training.</li><li>
Review security questionnaires, contracts, and vendor engagements to ensure third-party compliance with cybersecurity requirements.</li><li>
Provide compliance support to SSCC/CBC partners.</li><li>
Collaborate with key stakeholders, such as legal, finance, IT, and operations teams, to provide guidance on compliance-related matters and promote a culture of risk awareness and ethical behavior.</li><li>
Stay informed on relevant laws, regulations, industry standards, and emerging governance, risk, and compliance trends, and communicate any changes or updates to the GRC Lead, Director and/or CISO.</li><li>
Assist in conducting periodic audits and internal reviews to identify control weaknesses and recommend corrective actions.</li><li>
Foster a culture of ethics, integrity, and accountability within the agency.</li></ul> 
The mission of DFPS is to build on strengths of families and communities to keep children and vulnerable adults safe, so they thrive.
The Cybersecurity Analyst II is expected to work collaboratively with other team members from a positive, proactive, and mission-first perspective. They will assist in planning, monitoring, and maintaining cybersecurity and information technology security processes and controls. The DFPS cybersecurity environment is extensive and complex, allowing you to combine your previous experience in similar environments with your analytical skills.
This position is classified as full-time (40 hours a week). This position is 100% telework within Texas and requires the candidate to maintain personal Wi-Fi and webcam capabilities during work hours to perform their duties. Work outside of regular hours may be required. Travel to other Austin offices(s) may be required. Works under limited supervision, with considerable latitude for initiative and independent judgment. 
Essential Job Functions:<ul><li>
Supports the Cybersecurity Awareness Training Program by updating content, tracking completion metrics, and coordinating campaigns.</li><li>
Maintains the accuracy and relevance of internal and external cybersecurity communications, including website content and shared dashboards.</li><li>
Ensures the team's shared inbox and communication channels are monitored and responsive, enhancing stakeholder engagement and service delivery.</li><li>
Provides day-to-day operational support of the GRC platform, including access control, user account management, and issue resolution.</li><li>
Troubleshoots platform issues and works with internal IT or vendor support teams to ensure consistent system performance.</li><li>
Assists in the configuration and enhancement of GRC workflows to streamline assessments, reporting, and risk tracking.</li><li>
Organizes compliance evidence artifacts to satisfy internal, state, and federal reporting requirements.</li><li>
Coordinates the upkeep of a centralized evidence repository to support recurring assessments and audit preparedness.</li><li>
Collaborates with audit teams to ensure timely responses to findings, recommendations, and control testing activities.</li><li>
Assists in assessing existing IT architecture and solutions for alignment with standards such as NIST 800-53, NIST CSF, and CJIS.</li><li>
Contributes to the ongoing development and testing of Disaster Recovery (DR) and Business Continuity (BC) plans.</li><li>
Participates in cross-functional architecture reviews to ensure security considerations are embedded in system design and implementation.</li><li>
Assists in conducting risk assessments of third-party vendors and reviewing technology contracts for security and compliance considerations.</li><li>
Collaborates with senior team members to ensure contractual terms align with cybersecurity policies and regulatory requirements.</li><li>
Supports engagement efforts with business and IT stakeholders by gathering requirements and assisting with the coordination of risk management activities.</li><li>
Conducts basic research on emerging cybersecurity risks to support team planning and help identify potential impacts to the Department of Family &amp; Protective Services agency's third-party ecosystem.</li><li>
Ensures division website content is accurate, up-to-date, and effectively communicated. Supports division email box is monitored and maintained.</li><li>
Functions as a cybersecurity generalist to support and backfill work across the team.</li><li>
Provides GRC system operational support, including troubleshooting issues, access control management, account management, and general technical support.</li><li>
Advises customers and internal stakeholders on security configuration and best practice issues.</li></ul> 
Knowledge, Skills, and Abilities<ul><li>
Experience with State of Texas information security requirements, including Texas Administrative Code &sect;202 and Texas Government Code 2054, is strongly preferred.</li><li>
Knowledge of security controls in industry-standard frameworks including, but not limited to the Federal Information Security Management Act (FISMA), the Federal Risk and Authorization Management Program (FedRAMP), the National Institute of Standards (NIST) 800 Series Special Publications, the NIST Cybersecurity Framework, FBI Criminal Justice Information Services (CJIS) Security Policy or other security standards and regulations.</li><li>
Proficiency in using GRC software and other relevant tools.</li><li>
Ability to prepare technical issue papers and research reports and effectively deliver oral presentations and written reports to IT and non-IT management</li><li>
Excellent analytical and problem-solving skills, with the ability to identify and evaluate potential risks and develop effective mitigation strategies.</li><li>
Exceptional attention to detail and a thorough understanding of internal control systems.</li><li>
Experience in developing and delivering compliance training programs.</li><li>
Experience creating and managing policy, processes, and procedure documents.</li><li>
Enjoys looking for and building efficiencies in the team, strong consensus building, multi-tasking, interpersonal, and analytical skills.</li><li>
Experience auditing various Cloud architectures and deployment strategies such as Software-as-a-service, Infrastructure-as-a-service, Platform as a service, etc.</li><li>
Excellent written and verbal communication skills with the ability to adapt messaging to executive, technical, and non-technical audiences.</li></ul> 
Registrations, Licensure Requirements, or Certifications:<ul><li>
If not already certified, must obtain within one year of employment a Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), GIAC Critical Controls Certification (GCCC), (ISC)&sup2; Certified in Governance, Risk and Compliance (CGRC) or similar certification.</li></ul> 
Initial Screening Criteria:<ul><li>
Graduation from an accredited four-year college or university with major coursework in cybersecurity, information technology, computer engineering, computer information systems, computer science, management information systems, or a related field is generally preferred. Work experience may be substituted for education on a year-for-year basis.</li><li>
1-2 years&rsquo; experience in governance, risk management, and compliance roles, preferably in a regulated industry or highly complex environment.</li></ul> 
Note: You must meet the minimum initial screening criteria to be considered. You should only apply if your submittal documents clearly reflect experience meeting the initial screening criteria. 
Review our Tips for Success when applying for jobs at DFPS, DSHS and HHSC.
Military occupation(s) that relate to the initial selection criteria and registration or licensure requirements for this position may include, but not limited to those listed in this posting. All active-duty military, reservists, guardsmen, and veterans are encouraged to apply if qualified to fill this position. For more information please see the Texas State Auditor&rsquo;s Job Descriptions, Military Crosswalk and Military Crosswalk Guide at Texas State Auditor's Office - Job Descriptions. You may also contact the DFPS Military Liaison at dfpsmilvets@dfps.texas.gov with additional questions.
Applicants selected for hire must pass a background check and if applicable a driver&rsquo;s record check.
State of Texas employees are required to maintain the security and integrity of critical infrastructure as defined in Section 117.001(2), State of Texas Business and Commerce Code. Applicants selected for hire comply with this code by completing related training and abiding by agency cybersecurity and communications system usage policies.
As a state agency, DFPS is required by Texas Administrative Code (TAC 206 and 213) to ensure all Electronic Information Resources (EIR) follow accessibility standards. The staff must be familiar with the WCAG 2.1 AA and Section 508 to create accessible content including but not limited to; Microsoft Office documents, Adobe PDFs, webpages, software, training guides, video, and audio files.
DFPS uses E-Verify. You must bring your I-9 documentation with you on your first day of work. Employees must provide documentation to DFPS to show their identity and authorization to work in the US. Please review the following link for authorized documents: https://www.uscis.gov/i-9-central/form-i-9-acceptable-documents .
In compliance with the Americans with Disabilities Act (ADA), HHS/DFPS agencies will provide reasonable accommodation during the hiring and selection process for qualified individuals with a disability. If you need assistance completing the on-line application, contact the HHS/DFPS Employee Service Center at 1-888-894-4747. If you are contacted for an interview and need accommodation to participate in the interview process, please notify the person scheduling the interview.</div>

Cybersecurity Analyst II

MVL Group

Main Responsibilities<ul><li>Lead the engineering, design, and implementation of advanced security measures for the protection of systems, networks, applications, and information assets</li><li>Implementation and Administration of Cyber Security Platforms (e.g., EDR, WAF, PAM, email security) including optimization and vendor management</li><li>Deployment and Administration of SIEM platforms, including development of detection use cases, correlation rules, dashboards and reports</li><li>Develop and manage the complete information security policy framework Conductperiodic reviews and continuous enhancements of security policies</li><li>Align policies with internationally recognized frameworks and standards MVL Group | Staff Requisition Form F1 | CONFIDENTIAL</li><li>Perform compliance assessments, including gap analyses and audits</li><li>Coordinate with auditors for internal and external compliance activities</li><li>Assist in establishing and optimizing information security governance structures Prepare compliance reports and manage regulatory submissions Key Requirements</li><li>Manage and administer global Microsoft 365 tenant (GCC G5) Strong experience with Microsoft Entra ID (Azure AD), Conditional Access, Identity Protection, and authentication strength policies</li><li>Hands-on experience with Microsoft Purview (DLP, sensitivity labels, compliance policies, and information protection)</li><li>Experience with Microsoft Intune, Windows 365, and endpoint security management Hands-on experience with Microsoft Defender suite and security incident response</li><li>Solid understanding of Zero Trust architecture and identity-first security models Experience operating within a multi-region or global organization</li><li>Strong scripting and automation skills including PowerShell (M365/Azure administration) and Python (security tooling, integrations, and workflow automation)</li><li>Relevant industry certifications (mandatory &mdash; see Certifications section below)</li><li>Experience in enterprise security environments</li><li>Strong understanding of information security frameworks (e.g., ISO/IEC 27001, NIST 800-171/172/53, CMMC)</li><li>Conduct formal information security risk assessments</li><li>Maintain risk registers and treatment plans</li><li>Implement security baselines for servers, endpoints, and network devices Enforce access control and data classification policies</li><li>Ensure encryption standards are applied for data at rest and in transit</li><li>Ability to document processes clearly and support audit requirements</li></ul>Job Type: Full-timeApplication Question(s):<ul><li>Do you have any of this certification?</li></ul>Cybersecurity Governance &mdash; At Least One Required:<ul><li>CompTIA Security+</li><li>CISSP &mdash; Certified Information Systems Security Professional</li><li>CISM &mdash; Certified Information Security Manager</li><li>CEH &mdash; Certified Ethical Hacker</li><li>Do you have any of this Certification?</li></ul>Microsoft 365 GCC G5 &mdash; At Least One Required:<ul><li>SC-200: Security Operations Analyst Associate</li><li>SC-300: Identity and Access Administrator</li><li>SC-400: Information Protection &amp; Compliance Administrator</li><li>AZ-500: Azure Security Engineer Associate</li></ul>Zscaler (Zero Trust / ZTNA) &mdash; At Least One Required:<ul><li>ZCCA-IA: Zscaler Certified Cloud Security Administrator</li><li>ZCCP-IA: Zscaler Certified Cloud Security Professional</li></ul><ul><li>What is your salary expectation?</li></ul>Work Location: In person

IT Cybersecurity Expert

Search 3563+ Vendor risk analyst jobs near you this April. New roles added regularly across leading industries. Apply today.