The Senior Analyst will respond to inquiries on the security controls policy, processes, and procedures implemented for managed systems and applications, as well as support Third Party Risk ...
The Senior Analyst will respond to inquiries on the security controls policy, processes, and procedures implemented for managed systems and applications, as well as support Third Party Risk ...
Conduct technical risk assessments, vulnerability analyses, and security architecture reviews to identify gaps and enhance protection of corporate assets. • Tooling, Automation & Optimization:
Conduct technical risk assessments, vulnerability analyses, and security architecture reviews to identify gaps and enhance protection of corporate assets. • Tooling, Automation & Optimization:
Be Seen First
Security Architect
Atlanta, GA · On-site
$85 - $95/hr
Deep understanding of application security testing approaches (SAST for code analysis, DAST for runtime testing, SCA for open-source risk) and how they complement each other. * Experience with ...
Quick apply
Be Seen First
Security Architect
Atlanta, GA · On-site
$85 - $95/hr
Deep understanding of application security testing approaches (SAST for code analysis, DAST for runtime testing, SCA for open-source risk) and how they complement each other. * Experience with ...
... Security/ECC ,In-depth with TMS, Upgrade TMS System/SAC (Analytic Cloud) + Resume and JD related ... Strong knowledge of Sarbanes-Oxley (SOX) compliance, including risk assessment, mitigating controls ...
Quick apply
... Security/ECC ,In-depth with TMS, Upgrade TMS System/SAC (Analytic Cloud) + Resume and JD related ... Strong knowledge of Sarbanes-Oxley (SOX) compliance, including risk assessment, mitigating controls ...
Performing third-party security risk assessments, especially for cloud service providers and ... responding to third-party requests for information on CNO's information security program/policies
Performing third-party security risk assessments, especially for cloud service providers and ... responding to third-party requests for information on CNO's information security program/policies
Senior Application Security Engineer
Alpharetta, GA · Hybrid
$56.75 - $75.75/hr
Develop dashboards and reports to communicate security risk to engineering teams and leadership. * Design and integrate OSS security tooling, including JFrog Artifactory/Xray or Sonatype Nexus ...
Senior Application Security Engineer
Alpharetta, GA · Hybrid
$56.75 - $75.75/hr
Develop dashboards and reports to communicate security risk to engineering teams and leadership. * Design and integrate OSS security tooling, including JFrog Artifactory/Xray or Sonatype Nexus ...
The Security & Compliance Specialist is responsible for reducing security risk and incidents across Spinen and all client environments by defining, enforcing, and sustaining strong baseline security ...
The Security & Compliance Specialist is responsible for reducing security risk and incidents across Spinen and all client environments by defining, enforcing, and sustaining strong baseline security ...
The Security & Compliance Specialist is responsible for reducing security risk and incidents across Spinen and all client environments by defining, enforcing, and sustaining strong baseline security ...
The Security & Compliance Specialist is responsible for reducing security risk and incidents across Spinen and all client environments by defining, enforcing, and sustaining strong baseline security ...
This role informs decision-making related to security risk exposure and operational stability through effective communication and technical insight. What You Will Do * Translate business requirements ...
This role informs decision-making related to security risk exposure and operational stability through effective communication and technical insight. What You Will Do * Translate business requirements ...
Compliance and Risk Management : * Ensure compliance with all relevant laws, regulations, and industry standards. * Oversee security risk assessments and implement appropriate mitigation measures.
Compliance and Risk Management : * Ensure compliance with all relevant laws, regulations, and industry standards. * Oversee security risk assessments and implement appropriate mitigation measures.
Senior Application Security Engineer
Alpharetta, GA · On-site
$56.75 - $75.75/hr
Develop dashboards and reports to communicate security risk to engineering teams and leadership. * Design and integrate OSS security tooling, including JFrog Artifactory/Xray or Sonatype Nexus ...
Senior Application Security Engineer
Alpharetta, GA · On-site
$56.75 - $75.75/hr
Develop dashboards and reports to communicate security risk to engineering teams and leadership. * Design and integrate OSS security tooling, including JFrog Artifactory/Xray or Sonatype Nexus ...
Senior, Security Engineer - Security Automation
Johns Creek, GA · On-site
$94K - $157K/yr
This role informs decision-making related to security risk exposure and operational stability through effective communication and technical insight. What You Will Do * Translate business requirements ...
Senior, Security Engineer - Security Automation
Johns Creek, GA · On-site
$94K - $157K/yr
This role informs decision-making related to security risk exposure and operational stability through effective communication and technical insight. What You Will Do * Translate business requirements ...
Senior AI Risk & Advisory Manager
Atlanta, GA · Hybrid
$193K - $301K/yr
Security and innovation treated as mutually reinforcing priorities * Define a new function at the ... Strong judgment and risk assessment capability * Experience working cross-functionally with IT and ...
Senior AI Risk & Advisory Manager
Atlanta, GA · Hybrid
$193K - $301K/yr
Security and innovation treated as mutually reinforcing priorities * Define a new function at the ... Strong judgment and risk assessment capability * Experience working cross-functionally with IT and ...
Senior, Security Engineer - Cloud Security
Johns Creek, GA · On-site
$94K - $157K/yr
Job Overview The Senior, Security Engineer reviews, develops, and manages security solutions to reduce risk for Macy's, Inc. This role actively engages with management to provide timely updates and ...
Senior, Security Engineer - Cloud Security
Johns Creek, GA · On-site
$94K - $157K/yr
Job Overview The Senior, Security Engineer reviews, develops, and manages security solutions to reduce risk for Macy's, Inc. This role actively engages with management to provide timely updates and ...
Security Architect
Atlanta, GA · On-site
$62.50 - $80.75/hr
Work with Cyber Risk and Operations organizations to design solutions in response to security assessments and risk analyses to identify vulnerabilities and build/implement remediation strategies.
Security Architect
Atlanta, GA · On-site
$62.50 - $80.75/hr
Work with Cyber Risk and Operations organizations to design solutions in response to security assessments and risk analyses to identify vulnerabilities and build/implement remediation strategies.
Security Architect
Atlanta, GA · On-site
$62.50 - $80.75/hr
Work with Cyber Risk and Operations organizations to design solutions in response to security assessments and risk analyses to identify vulnerabilities and build/implement remediation strategies.
Security Architect
Atlanta, GA · On-site
$62.50 - $80.75/hr
Work with Cyber Risk and Operations organizations to design solutions in response to security assessments and risk analyses to identify vulnerabilities and build/implement remediation strategies.
Performs information security risk assessments, and acts as an internal auditor. Evaluates audit findings and drives remediation of identified control deficiencies. * Reviews all system-related ...
Performs information security risk assessments, and acts as an internal auditor. Evaluates audit findings and drives remediation of identified control deficiencies. * Reviews all system-related ...
Performs information security risk assessments, and acts as an internal auditor. Evaluates audit findings and drives remediation of identified control deficiencies. * Reviews all system-related ...
Performs information security risk assessments, and acts as an internal auditor. Evaluates audit findings and drives remediation of identified control deficiencies. * Reviews all system-related ...
Conducts and oversees risk assessments (thirdparty, vulnerability, penetration testing, application). * Implements risk mitigation plans and maintains security policies, standards, and procedures.
Conducts and oversees risk assessments (thirdparty, vulnerability, penetration testing, application). * Implements risk mitigation plans and maintains security policies, standards, and procedures.
Senior, Security Engineer - Cloud Security
$94K - $157K/yr
Job Overview The Senior, Security Engineer reviews, develops, and manages security solutions to reduce risk for Macy's, Inc. This role actively engages with management to provide timely updates and ...
Senior, Security Engineer - Cloud Security
$94K - $157K/yr
Job Overview The Senior, Security Engineer reviews, develops, and manages security solutions to reduce risk for Macy's, Inc. This role actively engages with management to provide timely updates and ...
Security Risk information
What is the difference between Security Risk vs Security Analyst?
| Aspect | Security Risk | Security Analyst |
|---|---|---|
| Required Credentials | Knowledge of security principles, risk assessment skills | Certifications like CompTIA Security+, CISSP, or CISA |
| Work Environment | Identifying potential threats, assessing vulnerabilities | Monitoring security systems, analyzing security data |
| Employer & Industry Usage | Used across industries to identify threats | Commonly employed in cybersecurity teams |
| Search & Comparison Intent | Understanding risk factors and mitigation | Analyzing security incidents and improving defenses |
Security Risk involves identifying and assessing potential threats to an organization, focusing on risk management strategies. Security Analysts, on the other hand, monitor and analyze security systems to detect and respond to threats. While both roles require security knowledge and certifications, Security Risk professionals focus on risk assessment, whereas Security Analysts are more involved in operational security monitoring.
What are security risk professionals?
Security risk professionals are experts who identify, assess, and mitigate potential threats to an organization's physical and digital assets. Their responsibilities include conducting risk assessments, developing security policies, and ensuring compliance with regulations. They work to minimize vulnerabilities that could lead to data breaches, theft, or other security incidents. These professionals may also train staff on security best practices and respond to security incidents as they arise.
What are some common challenges faced by Security Risk professionals, and how can they overcome them?
Security Risk professionals often face challenges such as staying updated with rapidly evolving threats, balancing security needs with business objectives, and gaining buy-in from stakeholders for risk mitigation strategies. To overcome these, it’s essential to engage in continuous learning, build strong cross-functional relationships, and communicate the value of security initiatives in business terms. Developing robust reporting and assessment processes can also help identify risks early and ensure effective collaboration across departments.
What are the key skills and qualifications needed to thrive as a Security Risk Analyst, and why are they important?
To thrive as a Security Risk Analyst, you need a strong understanding of information security principles, risk assessment methodologies, and relevant regulations, typically supported by a degree in cybersecurity or a related field. Familiarity with risk management frameworks (such as NIST or ISO 27001), vulnerability assessment tools, and certifications like CISSP or CISM are highly valued. Analytical thinking, attention to detail, and effective communication skills help convey risk findings and collaborate with diverse stakeholders. These competencies are crucial for identifying threats, minimizing vulnerabilities, and ensuring organizational resilience against security risks.
What are popular job titles related to Security Risk jobs in Georgia? For Security Risk jobs in Georgia, the most frequently searched job titles are:
What job categories do people searching Security Risk jobs in Georgia look for? The top searched job categories for Security Risk jobs in Georgia are:
Full-time
Medical, Dental, Vision, Retirement, PTO
Posted 2 days ago
Job description
Senior Analyst, Cybersecurity Governance, Risk and Compliance, Atlanta, GA
The Senior Analyst, Cybersecurity Governance Risk & Compliance will administer the completion of compliance-related client requests to assess security policies and procedures. The Senior Analyst will respond to inquiries on the security controls policy, processes, and procedures implemented for managed systems and applications, as well as support Third Party Risk Management (TPRM) and Governance and Risk functions in conducting vendor due diligence (initial, reassessments and ongoing monitoring) and supporting broader GRC efforts. This position is 100% Onsite and not open for Remote.
Senior Analyst, Cybersecurity Governance, Risk and Compliance Responsibilities:
- Review and understand current IT Risk Management (ITRM) program framework and associated policies, standards, procedures, and processes.
- Prepare and respond to related compliance requests and web-shares including referencing evidentiary artifacts or other documentation.
- Complete external information security assessments, remediation efforts and support status tracking of assessment queues.
- Coordinate with external assessors and internal subject matter experts to address compliance inquiries and web-shares of security artifacts.
- Assist in further defining the process for completing information security control assessments.
- Support metrics and reporting of the Information Security Program through the collection and analysis of effectiveness security control measures.
- Develop understanding of control structure to support the creating or revising standard narratives/responses for client questionnaires (e.g., SIG).
- Work with the CISO, senior managers, managers and other internal stakeholders to report existing information security programs and ongoing security projects that address information security risks and compliance requirements.
- Manage competing deadlines and multiple external inquiries using effective organizational skills and attention to detail as demonstrated by prior work experience.
- Contribute to the creation of GRC related processes and procedures and relevant documents.
- Collaborate with InfoSec, Privacy and GRC management and internal subject matter experts to support coordination, tracking, and reporting of GRC team strategy and goals; and complete other tasks as assigned.
- Participate in efforts to evolve and streamline GRC solutions, processes and procedures.
- Develop and maintain the status tracking related to findings from information security assessments, Governance, Risk and Compliance, and TPRM due diligence/reassessment assessments and associated remediations.
Senior Analyst, Cybersecurity Governance, Risk and Compliance Qualifications:
- Bachelor's degree (required) and at least 5 years of combined information technology and information security experience.
- Strong understanding of multiple risk management concepts, frameworks, and standards (CSC, NIST, ISO, COBIT).
- Strong understanding of information security concepts and technologies.
- Strong understanding of due diligence and compliance documents (e.g. SOC II Type II, ISO 27001 Certification, SIG Questionnaires, Certificates of Insurance, Pen Test, etc.).
- Strong communication skills with the ability to interact with various teams.
- Demonstrated experience with the NIST Cybersecurity Framework and auditing security controls identified in NIST SP800-171 and NIST SP800-53A.
- Experience in the analysis of IT and Security control requirements and understanding of associated technology processes.
- Experience working with internal and external auditing firms.
- Fundamental knowledge of MS Outlook, Word, Excel, Visio, and PowerPoint.
Benefits include medical insurance, retirement plan, Dental, Vision, PTO, etc.
Keywords: Atlanta GA Jobs, Senior Analyst, Cybersecurity Governance Risk and Compliance, Information Security, Risk Management, CSC, NIST, ISO, COBIT, NIST Cybersecurity Framework, NIST SP800-171, NIST SP800-53A, SOC II Type II, ISO 27001 Certification, SIG Questionnaires, Certificates of Insurance, Pen Test, Georgia Recruiters, Information Technology Jobs, IT Jobs, George Recruiting
Looking to hire for similar positions in Atlanta, GA or in other cities? Our IT recruiting agencies and staffing companies can help.
We help companies that are looking to hire Senior Analysts, Cybersecurity Governance Risk and Compliance for jobs in Atlanta, Georgia and in other cities too. Please contact our IT recruiting agencies and IT staffing companies today! Phone 630-428-0600 ext. 11 or email us at jobs@nextstepsystems.com. Click here to submit your resume for this job and others.
Atlanta Georgia IT Recruiters, Austin TX IT Recruiters, Baltimore Executive Staffing, Boston IT Recruiters, Charlotte IT Recruiters, Chicago Recruiting Agency, Cincinnati Executive Search Firms, Cleveland Executive Tech Recruiting, Columbus Technical Recruiters, Dallas Recruiters for IT, Denver Technology Headhunters, Detroit IT Headhunters, Fort Lauderdale Information Technology Recruiters, Houston IT Recruiters, Indianapolis IT Recruiters, Jacksonville IT Recruiters, Kansas City IT Recruiters, Los Angeles IT Recruiters, Miami IT Recruiters, Minneapolis IT Recruiters, Nashville IT Recruiters, New Jersey Tech Recruiters, New York IT Recruiters, Phoenix IT Recruiters, Raleigh IT Recruiters, Salt Lake City IT Recruitment, San Antonio Information Technology Recruiters, San Diego Executive Staffing, San Francisco Executive Search Firms, San Jose Executive Tech Recruiting, Seattle Technical Recruiters, Silicon Valley Tech Recruiters, St. Louis Technology Headhunters, Tampa Technology Headhunters, Washington DC IT Recruiters
Home"Senior Analyst, Cybersecurity Governance, Risk and Compliance
The Senior Analyst, Cybersecurity Governance Risk & Compliance will administer the completion of compliance-related client requests to assess security policies and procedures. The Senior Analyst will respond to inquiries on the security controls policy, processes, and procedures implemented for managed systems and applications, as well as support Third Party Risk Management (TPRM) and Governance and Risk functions in conducting vendor due diligence (initial, reassessments and ongoing monitoring) and supporting broader GRC efforts. This position is 100% Onsite and not open for Remote.
Senior Analyst, Cybersecurity Governance, Risk and Compliance Responsibilities:
- Review and understand current IT Risk Management (ITRM) program framework and associated policies, standards, procedures, and processes.
- Prepare and respond to related compliance requests and web-shares including referencing evidentiary artifacts or other documentation.
- Complete external information security assessments, remediation efforts and support status tracking of assessment queues.
- Coordinate with external assessors and internal subject matter experts to address compliance inquiries and web-shares of security artifacts.
- Assist in further defining the process for completing information security control assessments.
- Support metrics and reporting of the Information Security Program through the collection and analysis of effectiveness security control measures.
- Develop understanding of control structure to support the creating or revising standard narratives/responses for client questionnaires (e.g., SIG).
- Work with the CISO, senior managers, managers and other internal stakeholders to report existing information security programs and ongoing security projects that address information security risks and compliance requirements.
- Manage competing deadlines and multiple external inquiries using effective organizational skills and attention to detail as demonstrated by prior work experience.
- Contribute to the creation of GRC related processes and procedures and relevant documents.
- Collaborate with InfoSec, Privacy and GRC management and internal subject matter experts to support coordination, tracking, and reporting of GRC team strategy and goals; and complete other tasks as assigned.
- Participate in efforts to evolve and streamline GRC solutions, processes and procedures.
- Develop and maintain the status tracking related to findings from information security assessments, Governance, Risk and Compliance, and TPRM due diligence/reassessment assessments and associated remediations.
Senior Analyst, Cybersecurity Governance, Risk and Compliance Qualifications:
- Bachelor's degree (required) and at least 5 years of combined information technology and information security experience.
- Strong understanding of multiple risk management concepts, frameworks, and standards (CSC, NIST, ISO, COBIT).
- Strong understanding of information security concepts and technologies.
- Strong understanding of due diligence and compliance documents (e.g. SOC II Type II, ISO 27001 Certification, SIG Questionnaires, Certificates of Insurance, Pen Test, etc.).
- Strong communication skills with the ability to interact with various teams.
- Demonstrated experience with the NIST Cybersecurity Framework and auditing security controls identified in NIST SP800-171 and NIST SP800-53A.
- Experience in the analysis of IT and Security control requirements and understanding of associated technology processes.
- Experience working with internal and external auditing firms.
- Fundamental knowledge of MS Outlook, Word, Excel, Visio, and PowerPoint.
Benefits include medical insurance, retirement plan, Dental, Vision, PTO, etc.
Keywords: Atlanta GA Jobs, Senior Analyst, Cybersecurity Governance Risk and Compliance, Information Security, Risk Management, CSC, NIST, ISO, COBIT, NIST Cybersecurity Framework, NIST SP800-171, NIST SP800-53A, SOC II Type II, ISO 27001 Certification, SIG Questionnaires, Certificates of Insurance, Pen Test, Georgia Recruiters, Information Technology Jobs, IT Jobs, George Recruiting
Looking to hire for similar positions in Atlanta, GA or in other cities? Our IT recruiting agencies and staffing companies can help.
We help companies that are looking to hire Senior Analysts, Cybersecurity Governance Risk and Compliance for jobs in Atlanta, Georgia and in other cities too. Please contact our IT recruiting agencies and IT staffing companies today! Phone 630-428-0600 ext. 11 or email us at jobs@nextstepsystems.com. Click here to submit your resume for this job and others.
Atlanta Georgia IT Recruiters, Austin TX IT Recruiters, Baltimore Executive Staffing, Boston IT Recruiters, Charlotte IT Recruiters, Chicago Recruiting Agency, Cincinnati Executive Search Firms, Cleveland Executive Tech Recruiting, Columbus Technical Recruiters, Dallas Recruiters for IT, Denver Technology Headhunters, Detroit IT Headhunters, Fort Lauderdale Information Technology Recruiters, Houston IT Recruiters, Indianapolis IT Recruiters, Jacksonville IT Recruiters, Kansas City IT Recruiters, Los Angeles IT Recruiters, Miami IT Recruiters, Minneapolis IT Recruiters, Nashville IT Recruiters, New Jersey Tech Recruiters, New York IT Recruiters, Phoenix IT Recruiters, Raleigh IT Recruiters, Salt Lake City IT Recruitment, San Antonio Information Technology Recruiters, San Diego Executive Staffing, San Francisco Executive Search Firms, San Jose Executive Tech Recruiting, Seattle Technical Recruiters, Silicon Valley Tech Recruiters, St. Louis Technology Headhunters, Tampa Technology Headhunters, Washington DC IT Recruiters
Home"Senior Analyst, Cybersecurity Governance, Risk and Compliance
About Next Step Systems
Sourced by ZipRecruiter
Industry
It services
Company size
11 - 50 Employees
Headquarters location
Naperville, IL, US
Year founded
1995