Senior Security Analyst, Security Risk Management

What you'll do

• Conduct scenario-based security risk assessments and document treatment decisions with engineering SMEs and risk owners.
• Prepare quarterly security risk reporting and executive and board materials; align security risks with enterprise risk management.
• Mature the risk program and automate intake, analysis, register maintenance, and reporting using AI; support FedRAMP 20x risk decisions.

What they ask for

• Experience assessing technical risks using NIST SP 800-30, FAIR, or a comparable method, with technical depth to engage engineers on architecture and controls.
• Experience building or maturing a security risk program and integrating security risk into enterprise risk management.
• Experience preparing quarterly risk reporting and security risk content for executive and board decks.
• Working knowledge of NIST 800-53, NIST CSF, ISO 27001, and SOC 2; has built AI skills, agents, or automations that materially increase risk-program throughput.

Nice to have

• Hands-on FedRAMP 20x experience, including Security Decision Record reporting for rules and Key Security Indicators (SDR-CSO-FRR, SDR-CSX-KSI).

Pay

$124K – $194K USD base salary

Tools

NIST SP 800-30, FAIR, NIST 800-53, NIST CSF, ISO 27001, SOC 2, FedRAMP 20x

AI focus

Build and share AI skills and automations for intake triage, first-draft risk analyses, register hygiene, and report generation.