Who We Are:
Core Spaces (Core) is more than a real estate company; it’s a people company. Where building relationships is just as important as building properties. From researchers and architects to designers and operators, Core is made up of risk takers and dreamers who are on a mission to invent the future of living. Our six cultural values guide us every day and we strive to live them in everything we do: PUSH (Invent Better Places to Live), GRIT (We Got This), LIFT (Help Each Other Win), SHINE (Bring Your Full Self), UPHOLD (Never Break Trust), GROW (Always Get Better). Everything Core does stem from this culture of collaboration and innovation, and the drive to constantly improve the resident experience. This unique approach has led to creating spaces and services that are redefining the way people live.
What We Do:
Founded in 2010, Core is a vertically integrated real estate investment manager focused on acquiring, developing and managing across the student housing and build-to-rent (“BTR”) sectors. Its residential communities feature world-class amenities, progressive design, and hospitality-driven service. Core’s student housing portfolio includes over 59,000 beds currently owned or managed, with a pipeline of over 50,930 beds in various stages of development. Core’s BTR division has over 3,000 homes under development, now leasing or in its pipeline in high-growth metros nationwide. For more information, visit
http://www.corespaces.com- Portfolio and pipeline numbers as of Q4 2025
Benefits That Matter:
- A culture that provides you with a sense of belonging
-
Hybrid or remote work options may vary by role to support work-life balance
-
Competitive pay that values your contributions
-
Incentives designed to reward your achievements
-
Paid flexible PTO to disconnect or celebrate life milestones
-
Paid 14+ holidays, including your birthday, to disconnect and celebrate
-
Paid Parental Leave that begins after 90 days
-
Paid volunteer time off to give back to your community
-
Monthly workshop weeks; fewer meetings & more collaboration
-
Robust health plan options that begin within at least 30 days of your employment
-
Monthly phone reimbursement
-
Wellness allowance and perks, including a yearly subscription to a meditation app
-
An environment that provides you a voice to share your perspectives
-
Employee Assistance Program (EAP) for access to confidential support services
-
Company retirement options including 401(k) + matching & Roth account option
Position Overview:
The Senior Security Analyst will play a strategic role in advancing Core’s enterprise security program. This individual will lead initiatives across vendor risk management, user access governance, NIST-based risk management, SOX-aligned IT controls, and incident response readiness. The role requires both hands-on execution and program-level leadership, ensuring security initiatives are scalable, audit-ready, and aligned with business objectives.
What You Will Do:
- Lead enterprise user access governance, including quarterly access reviews, risk ranking, and executive reporting.
-
Own and enhance the Third-Party Risk Management (TPRM) program, including ProcessUnity administration, vendor tiering, and risk scoring methodologies.
-
Drive NIST CSF alignment efforts and oversee remediation planning for identified control gaps.
-
Partner with Finance and external auditors to ensure SOX ITGC compliance and evidence readiness. Evaluate and strengthen Microsoft tenant security posture during ongoing migration initiatives.
-
Lead incident response coordination, including tabletop exercises and after-action reporting.
-
Develop security metrics and dashboards to track risk reduction, audit findings, and remediation timelines.
-
Draft, update, and mature enterprise security policies and standards.
-
Provide security guidance to cross-functional teams to ensure compliance with established controls.
-
Stay current on emerging threats, IAM best practices, and regulatory requirements.
Ideally, You'll Have:
- Bachelor’s degree in Cybersecurity or related field required
-
5-6 years of experience in security or risk management within an enterprise environment
-
Familiarity with TPRM processes and tools - ProcessUnity experience preferred
-
Business experience working with an established security program
-
Strong communication and team collaboration skills; technical depth not required, but a security background is essential
You'll crush it if you have experience with
-
Building or maturing a formal TPRM governance framework.
-
Designing KPI dashboards for audit tracking and risk remediation.
-
Leading incident response tabletop exercises.
-
Operating in a SOX-regulated or highly regulated environment.
-
Driving cross-functional alignment between IT, Finance, HR, and Legal.
Organizational Structure
Reports to: Vice President, Technology
Direct Reports: N/A
Disclaimer:
Please note that job responsibilities, reporting lines, and duties outlined in this job description are subject to change to meet the evolving needs of the organization.
As an Equal Opportunity Employer, Core Spaces celebrates diversity and is committed to creating an equitable and inclusive environment, which creates a sense of belonging for all employees. We do not discriminate and believe every individual should be proud of who they are and the community they represent.
Pay Range: USD $115,000.00 - USD $125,000.00 /Yr. Additional Compensation: Employees may be eligible for discretionary bonuses, typically up to 10% of base salary annually, depending on individual and organizational performance. Compensation Disclosure:
The compensation range listed reflects the base salary or hourly rate that we reasonably and in good faith expect to offer for this role at the time of posting. Actual compensation may vary based on factors such as education, experience, skills, certifications, seniority, geographic location, and business needs.
This role may be eligible for additional forms of compensation, including bonuses, commissions, stipends, or non-cash incentives, depending on position and performance. Benefits may include health insurance, retirement plans, paid time off, and other role-based offerings, subject to eligibility requirements.
All compensation components are subject to change based on business needs or market conditions.