ZipRecruiter

Log In

1

Information Security Risk Manager Jobs in Matthews, NC

Crowe LLP

Third Party Risk Manager

Charlotte, NC

In management at Crowe, you play a pivotal role in leading teams, guiding project execution, and ... Documenting information security risk and compliance findings, presenting recommendations for ...

Compunnel

M365 Risk Manager

Charlotte, NC · On-site

... information security teams, and risk organizations to identify and mitigate risks. • Facilitate risk reviews, issue management activities, and governance reporting. • Monitor and track risk ...

TD Bank

Information Security Specialist (US)

Charlotte, NC · On-site

$98.16 - $159.27/hr

... management commitments, and escalation of at-risk issues to the U.S. Technology Regulatory ... Information security certification / accreditation an asset* 7+ years of relevant experience*

New

AT&T

Application Security Vulnerability Risk Lead

Charlotte, NC · On-site

$141K - $211K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

As a Technology Risk: Vulnerability Management & Application Security Domain Lead, you will be ... Information Security, Regulatory Compliance). * Proven experience in vulnerability management and ...

Apex Systems

Information Security Engineer 3

Charlotte, NC · On-site

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

Job#: 3041871 Information Security Engineer III Financial Services Industry Client Locations ... Risk Management * Defense-in-Depth * Least Privilege * Zero Trust Architecture * Experience working ...

Forhyre

Information Security Architect

Charlotte, NC · On-site

We are looking for a Lead Information Security Architect who will be responsible for developing and ... and risk management * Work with governance teams to establish automated processes and best ...

Wells Fargo

Senior Information Security Engineer

Charlotte, NC · On-site

$104K - $141K/yr

... risk management, threat identification, modeling, monitoring, incident response, access management ... Advanced Information Security technical skills and understanding of information security practices ...

EnPro Industries

Director, IT Security

Charlotte, NC · On-site

Lead the Enpro Information Security Team in the enhancement of incident response processes ... Support risk management initiatives by working closely with stakeholders across business functions ...

BC Forward

IT Business Analyst III

Charlotte, NC · On-site

$53.54/hr

Partner with risk management, Global Information Security, control functions, and vendors to complete compliance activities. Primary and Secondary Skills: Primary: SWIFT. Secondary: Vulnerability ...

next page

Showing results 1-20

All JobsInformation Security Risk JobsInformation Security Risk Manager JobsInformation Security Risk Manager Jobs in Matthews, NC

Information Security Risk Manager information

See Matthews, NC salary details

$58.7K

$127.9K

$188K

How much do information security risk manager jobs pay per year?

As of Aug 19, 2026, the average yearly pay for information security risk manager in Matthews, NC is $127,906.00, according to ZipRecruiter salary data. Most workers in this role earn between $103,800.00 and $150,800.00 per year, depending on experience, location, and employer.

What cities near Matthews, NC are hiring for Information Security Risk Manager jobs?

Cities near Matthews, NC with the most Information Security Risk Manager job openings:

Infographic showing various Information Security Risk Manager job openings in Matthews, NC as of August 2026, with employment types broken down into 1% As Needed, 59% Full Time, 38% Part Time, and 2% Contract. Highlights an 93% Physical, 3% Hybrid, and 4% Remote job distribution, with an average salary of $127,906 per year, or $61.5 per hour.

Information Security Analyst 3 - SOC Analyst

Apex Systems

Charlotte, NC • On-site

Other

Medical, Dental, Vision, Life, Retirement

Posted 8 days ago

Job description

Job#: 3043803
Job Description:
Information Security Analyst 3 - SOC Analyst
Location
  • Charllotte, NC / Dallas, TX / Minneapolis, MN / Chandler, AZ / Des Moines. IA, Raleigh, NC

Job Summary
The Information Security Analyst 3 is responsible for supporting enterprise information security initiatives through risk analysis, security monitoring, incident response, compliance activities, security assessments, Identity and Access Management (IAM), and stakeholder consultation. This role serves as a key contributor in identifying, assessing, and mitigating cybersecurity risks while ensuring alignment with Enterprise Information Security policies, standards, and regulatory requirements.
The ideal candidate will possess a strong background in security operations, incident response, threat detection, security analytics, cloud security technologies, and identity security. This individual will partner with technology teams, security operations personnel, risk management partners, and business stakeholders to improve the organization's security posture, proactively address cyber threats, and support enterprise security governance initiatives.
Key Responsibilities
Information Security Risk Management
  • Provide information security consultation to improve awareness and compliance with Enterprise Information Security policies, standards, and procedures.
  • Perform remediation activities related to security assessments, audits, risk reviews, and control testing findings.
  • Provide guidance and recommendations regarding mitigating controls and information security risk reduction strategies.
  • Evaluate information security risk exposure through advanced data aggregation, analysis, and reporting.
  • Review and interpret security policies, standards, and procedures while recommending improvements and enhancements.
  • Support information asset portfolio reconciliation and certification activities.
  • Review proposed control standards for business impact and provide recommendations for modifications and clarifications.
  • Support enterprise risk, compliance, governance, audit, and security control programs.
Security Operations & Incident Response
  • Participate in security monitoring, investigation, containment, escalation, and remediation activities.
  • Support incident response processes utilizing established procedures, tools, and technologies.
  • Perform threat hunting and investigative activities utilizing endpoint, network, identity, and cloud security telemetry.
  • Analyze security events and alerts generated by security monitoring platforms.
  • Support cyber threat detection and response efforts through security analytics and log analysis.
  • Leverage offensive security concepts and adversarial thinking techniques to identify indicators of compromise, threat actor behaviors, and emerging threats.
  • Conduct vulnerability assessment reviews and support remediation planning activities.
Security Monitoring & Analytics
  • Utilize Security Information and Event Management (SIEM) platforms to identify, investigate, and respond to security events.
  • Leverage Security Orchestration, Automation, and Response (SOAR) tools to improve security operations efficiency.
  • Analyze host, endpoint, network, cloud, and identity-related logs to identify suspicious activity and potential security incidents.
  • Develop reporting, dashboards, and metrics related to security risks, incidents, and operational performance.
  • Conduct threat hunting activities utilizing security analytics, endpoint telemetry, and event data.
  • Support cybersecurity reporting, security metrics development, operational dashboards, and risk exposure analysis.
Identity & Access Management (IAM)
  • Support enterprise Identity and Access Management (IAM) programs and security controls.
  • Assist with Identity Governance processes, access reviews, certification activities, and entitlement validation.
  • Support provisioning and deprovisioning controls and related compliance initiatives.
  • Review and analyze identity security risks associated with access management processes.
  • Support Privileged Access Management (PAM) initiatives and enterprise access control programs.
  • Assist with implementation and validation of identity-related controls including authentication, authorization, and Attribute-Based Access Control (ABAC) frameworks.
Security Controls & Compliance
  • Conduct security control testing and validation activities.
  • Assess effectiveness of security controls and identify opportunities for improvement.
  • Support compliance initiatives and regulatory requirements within the enterprise environment.
  • Partner with risk, compliance, audit, and technology teams to ensure effective governance and control coverage.
  • Assist with development and delivery of Information Security Awareness and Education programs.
  • Support vulnerability management processes, remediation efforts, and enterprise security governance initiatives.
  • Participate in security assessments and control reviews to improve overall risk posture.
Cloud & Endpoint Security
  • Support security monitoring and investigative efforts across:
    • Microsoft Azure
    • Office 365
    • Google Cloud Platform (Google Cloud Platform)
    • Cloud-based environments
  • Monitor and analyze security events generated from Endpoint Detection and Response (EDR) platforms.
  • Support implementation and maintenance of security controls protecting cloud and endpoint technologies.
  • Evaluate cloud security risks and recommend appropriate mitigation strategies.
  • Assist with monitoring cloud security posture and compliance requirements across multi-cloud environments.
Security Engineering & Automation
  • Support security tool integrations and automation initiatives that improve detection and response capabilities.
  • Partner with security engineering teams to enhance monitoring, workflow automation, and operational effectiveness.
  • Support SOAR implementation efforts and security automation activities.
  • Contribute to DevSecOps and security operations modernization initiatives.
  • Assist with security analytics and advanced detection engineering efforts.
Collaboration & Leadership
  • Collaborate with peers, technology teams, security engineers, compliance partners, and business stakeholders.
  • Provide consultation and security guidance to internal customers.
  • Support cross-functional security initiatives and projects.
  • Mentor junior analysts and provide knowledge sharing across the team.
  • Participate in continuous improvement efforts to strengthen security operations and risk management programs.
  • Serve as a trusted advisor on information security risks, controls, and incident response activities.
Required Qualifications
  • 4+ years of Information Security Analysis experience or equivalent demonstrated through work experience, military experience, education, or training.
  • 2+ years of Information Security Engineering experience.
  • 1+ year of Incident Response experience utilizing security monitoring tools and response methodologies.
  • 1+ year of experience with:
    • Security Information and Event Management (SIEM) platforms
    • Security Orchestration, Automation, and Response (SOAR) solutions
  • 1+ year of experience supporting:
    • Microsoft Azure
    • Office 365
    • Cloud security technologies
  • Experience conducting security investigations and responding to security incidents.
  • Knowledge of security analytics, incident response, and digital forensics disciplines.
  • Experience developing security reports, dashboards, and risk analysis deliverables.
  • Strong analytical, troubleshooting, and problem-solving skills.
  • Excellent verbal and written communication skills.
Preferred Qualifications
  • 2+ years of experience supporting Endpoint Detection and Response (EDR) solutions.
  • Experience with:
    • Threat Hunting
    • Security Operations
    • Incident Response
    • Digital Forensics
    • Security Analytics
  • Experience supporting Identity and Access Management (IAM), Identity Governance, Access Reviews, Provisioning and Deprovisioning, Privileged Access Management (PAM), and enterprise access control programs.
  • Experience developing cybersecurity metrics, dashboards, reporting, and operational security analytics.
  • Knowledge of offensive security concepts including penetration testing methodologies, adversary tactics, exploitation techniques, and vulnerability research.
  • Experience performing host and network log analysis in support of threat investigations and incident response activities.
  • Experience supporting vulnerability management, remediation planning, security assessments, and enterprise security governance initiatives.
  • Experience securing and monitoring cloud environments including Microsoft Azure and Google Cloud Platform (Google Cloud Platform).
  • Experience supporting security automation, security tool integrations, SOAR initiatives, and DevSecOps-driven security operations.
  • Experience working in banking, financial services, or other highly regulated environments.
  • Experience working within a 24x7x365 Security Operations Center (SOC) environment.
Technical Skills
Security Operations
  • Incident Response
  • Threat Hunting
  • Security Monitoring
  • Digital Forensics
  • Security Investigations
  • Security Analytics
  • Threat Detection
  • Cyber Threat Analysis
Security Platforms
  • SIEM
  • SOAR
  • Endpoint Detection & Response (EDR)
  • Log Management Solutions
  • Security Monitoring Platforms
  • Security Automation Tools
Cloud Security
  • Microsoft Azure
  • Office 365
  • Google Cloud Platform (Google Cloud Platform)
  • AWS
  • Cloud Security Monitoring
  • Cloud Security Controls
  • Cloud Risk Management
Identity & Access Management
  • Identity Governance
  • Access Reviews
  • Privileged Access Management (PAM)
  • Authentication & Authorization
  • IAM Administration
  • Provisioning & Deprovisioning
  • Attribute-Based Access Control (ABAC)
Security Controls & Governance
  • Security Assessments
  • Security Risk Management
  • Security Control Testing
  • Information Security Governance
  • Regulatory Compliance
  • Audit Management
  • Vulnerability Management
  • Remediation Planning
Security Technologies
  • Firewalls
  • Intrusion Detection Systems (IDS)
  • Intrusion Prevention Systems (IPS)
  • Malware Protection
  • Encryption Controls
  • Content Filtering
  • Internet Proxies
  • Endpoint Security Controls
Preferred Certifications
One or more of the following certifications are highly desired:
  • GIAC (Global Information Assurance Certification)
  • OSCP (Offensive Security Certified Professional)
  • OSWP (Offensive Security Wireless Professional)
  • OSCE (Offensive Security Certified Expert)
  • OSEE (Offensive Security Exploitation Expert)
  • OSWE (Offensive Security Web Expert)
Cloud Certifications
  • AWS Certified Security Specialty
  • Microsoft Azure Security Engineer Associate
  • Google Professional Cloud Security Engineer
  • Other relevant cloud security certifications
Desired Candidate Profile
The ideal candidate is a cybersecurity professional with expertise in incident response, threat detection, security monitoring, cloud security, security analytics, and Identity and Access Management (IAM). This individual possesses strong analytical and investigative skills, experience leveraging SIEM, SOAR, and EDR technologies, and the ability to identify and respond to complex cybersecurity threats.
Successful candidates will have experience supporting enterprise security operations, conducting threat hunting activities, performing vulnerability assessments, developing security metrics and reporting, and collaborating with risk, compliance, audit, and technology teams. Experience within large-scale, highly regulated environments such as financial services organizations is highly preferred.
Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.
Everforth Apex uses a virtual recruiter as part of the application process. Click for more details. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Everforth Apex and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at
Everforth Apex Benefits Overview: Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everfo

Apply