ZipRecruiter

Log In

1

Manager Security Risk Assessment Jobs in California

Cerebras Systems

Cybersecurity GRC Manager

Sunnyvale, CA · On-site

$130.30K - $176K/yr

Enhance and execute third-party security risk management practices, including inherent / residual security risk assessment, vendor / supplier security due diligence reviews, vendor / supplier ...

EvenUp Inc

Engineering Manager, Security

San Francisco, CA · On-site

$202.46K - $273.92K/yr

Vendor & Third-Party Risk Management - Lead the vendor risk program, including security assessments, contract reviews (BAAs, DPAs), and ongoing monitoring of third-party risk exposure. * Incident ...

ASK Consulting

Be Seen First

Information Security Technical Analyst (277223)

Oakland, CA · On-site

$50 - $53/hr

... risk-reduction through vulnerability management, vendor security monitoring and reviews, development & implementation of automated controls assessments. You will report to the Security Risk, and V2 ...

New

San Diego County Credit Union

IT Risk Analyst

San Diego, CA · On-site

$79.10K - $102.35K/yr

Bachelor's Degree in Computer Science; or coursework in IT, Security, or Risk Management. * 2 years ... Perform branch risk assessments on a scheduled basis. Assessment activities shall include ...

New

Meta

Security Engineer

Menlo Park, CA

$271K/yr

Experience with system design, threat modeling and risk assessment * Experience building engineered controls and guardrails to manage risks * Application of security principles such as least ...

Adobe

Sr. Manager Risk & Governance

San Jose, CA · On-site

Manage Adobe's Security Management framework, integrate industry-leading risk measurement models ... and provide senior leadership with actionable insights. Drive the Security Policy & Procedures ...

Adobe, Inc.

Sr. Manager Risk & Governance

San Jose, CA · On-site

Manage Adobe's Security Management framework, integrate industry-leading risk measurement models ... and provide senior leadership with actionable insights. Drive the Security Policy & Procedures ...

next page

Showing results 1-20

People also search for

All JobsSecurity Risk Assessment JobsManager Security Risk Assessment JobsManager Security Risk Assessment Jobs in California

Manager Security Risk Assessment information

What is the difference between Manager Security Risk Assessment vs Security Analyst?

AspectManager Security Risk AssessmentSecurity Analyst
CertificationsCISSP, CISM, CRISCCISSP, Security+
Work EnvironmentOversees security programs, manages teamsAnalyzes security threats, monitors systems
Industry UsageCommon in organizations with complex security needsWidely used across various industries for threat detection

The Manager Security Risk Assessment focuses on leading security risk evaluations, managing teams, and developing security strategies. In contrast, a Security Analyst primarily monitors security systems, analyzes threats, and responds to incidents. Both roles require relevant certifications and work within the cybersecurity industry, but their responsibilities differ in scope and focus.

What are the most commonly searched types of Security Risk Assessment jobs in California? The most popular types of Security Risk Assessment jobs in California are:
What cities in California are hiring for Manager Security Risk Assessment jobs? Cities in California with the most Manager Security Risk Assessment job openings:
Manager Security Risk Assessment jobs near you

Senior Security Governance, Risk and Compliance Analyst

RAVE Aerospace LLC

Brea, CA • On-site

$112.10K - $134.50K/yr

Full-time

Medical, Retirement, PTO

Posted 13 days ago

Job description

Job Summary:
The Senior Security Governance, Risk and Compliance Analyst will lead the Information Security Governance, Risk and Compliance (GRC) function. The Senior Security GRC Analyst will provide hands-on experience maturing risk management processes and establishing security & privacy related compliance with appropriate security standards and regulations that include ISO, NIST, PCI-DSS, MPA/TPN, GDPR and other industry-standard frameworks. The role will work collaboratively with various stakeholders to ensure success with all related programs. The Senior Security GRC Analyst will use risk-based methodologies and decision-making to arrive at creative and pragmatic solutions, without relying on pre-defined checklists, is an important component of the role. Ensures the performance of all duties in accordance with the company's policies and procedures, all global laws, and regulations, wherein the company operates.
Duties and Responsibilities:
  • Review regulatory requirements, external policies or standards related to Information Security & Data Protection/Privacy, and conduct gap analysis to internal security policies and requirements. Ensure compliance with regulatory compliance and certification programs (e.g., ISO 27001, NIST CSF, PCI-DSS, MPA/TPN, GDPR)
  • Establish, implement, and monitor the security certifications program and ensure that it continues scale appropriately with the business
  • Ensure compliance with the established key metrics that measure data security standards, the ISO standards/certification and provide evidence of compliance for internal and external audits
  • Be a Security and Compliance Champion that promotes and evangelizes awareness of different security and compliance risks and best practices across the company
  • Perform risk assessments-including third party vendor/supply chain assessments, and manage associated security risk remediation activities
  • Conduct control and risk assessments of technical operating environments and third parties.
  • Identify, document, and manage gaps related to security and compliance and other tasks to support ensuring the Company's underlying data and information security processes, infrastructure and measures are fit for purpose and scaled to deliver an appropriate level of protection
  • Collaborate with cross-functional teams to ensure security related controls are documented and managed
  • Support the business continuity management (BCM) program, including subject matter expertise input for business impact analysis (BIA), developing and testing business continuity plans (BCP), coordinating with IT on disaster recovery planning and updating/implementing crisis management plans (CMP)
  • Coordinate third party audits on security, controls, and security/privacy compliance
  • Conduct third party risk assessments and collaborate with external and internal stakeholders to identify critical risks to the organization
  • Work with third parties to agreed risk treatment plan and participate in contract review
  • Serve as a subject matter expert on internal controls, security, privacy and collaborate with Product Strategy and Development on product enhancements, features and security/privacy capabilities
  • Respond to customer security/compliance questionnaires
  • Stay current on market developments to identify emerging security technologies, risks, and trends

Requirements
  • Bachelor's Degree in Information Security, Information Systems, Engineering, or other related field or equivalent experience in a related field
  • 10+ years of progressive information security GRC experience
  • 5+ years of experience conducting & supporting internal/external formal audits (such as PCI-DSS, SOX, HIPAA)
  • Professional security certification such as Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Controls (CRISC), PCI-DSS Internal Security Assessor (ISA)
  • A comprehension of security standards and frameworks, rules and regulations, and system trust principals, such as ISO, NIST, OWASP, SANS Top 20, PCI-DSS, GDPR, ITIL, and SOC2
  • Previous experience with GRC tools such as KCM, Auditboard
  • Thorough understanding of Security Methodologies required
  • Ability to effectively communicate and educate others on the need and value-add of security governance, risk and compliance efforts

Benefits
The starting pay range for this position is $112,100 - $134,500 per year however, base pay offered may vary depending on the level of the position, skills, experience, job-related knowledge, and location.
In addition to a comprehensive package of health benefits that include company contributions, RAVE Aerospace offers a variety of additional benefits and perks to enhance your work-life balance experience including but not limited to:
  • Discretionary bonus program
  • Future financial security with a 401(k) program with company match
  • Paid time off covering vacations, personal time off and sick days, capped off by an exciting year-end holiday shutdown
  • Embraced flexibility with our alternative work schedule (9/80) to navigate your workweeks with every other Friday off

Apply