ZipRecruiter

Log In

1

Senior Information Security Risk Analyst Jobs in Houston, TX

Mwe

Senior Information Security Engineer

Houston, TX · Hybrid

$121K - $203K/yr

... risk frameworks and server architecture - Knowledge of network concepts, host-based security ... and analytical skills - Ability to work under tight deadlines and prioritize responsibilities ...

Alpha Generation

Sr. Risk Analyst

Houston, TX

Senior Analyst, Risk - Houston, Texas Company Information: Alpha Generation manages and operates power generation facilities that are well positioned to provide reliable, secure, safe, and ...

Alpha Generation

Sr. Risk Analyst

Houston, TX · On-site

Senior Analyst, Risk - Houston, Texas Company Information: Alpha Generation manages and operates power generation facilities that are well positioned to provide reliable, secure, safe, and ...

Alpha Generation

Sr. Risk Analyst

Houston, TX · On-site

$100 - $125/hr

Position Overview Reporting to the Director, Risk Management, the Sr. Analyst, Risk will play a critical role in providing analysis, evaluating and communicating risk exposures associated with ...

next page

Showing results 1-20

All JobsInformation Security Risk Analyst JobsSenior Information Security Risk Analyst JobsSenior Information Security Risk Analyst Jobs in Houston, TX

Senior Information Security Risk Analyst information

See Houston, TX salary details

$30

$55

$72

How much do senior information security risk analyst jobs pay per hour?

As of Sep 8, 2026, the average hourly pay for senior information security risk analyst in Houston, TX is $55.82, according to ZipRecruiter salary data. Most workers in this role earn between $43.37 and $62.69 per hour, depending on experience, location, and employer.

What does a senior information security risk analyst do?

A Senior Information Security Risk Analyst is responsible for identifying, evaluating, and mitigating risks to an organization's information systems and data. They conduct risk assessments, develop security policies, and recommend measures to protect against cyber threats and vulnerabilities. Additionally, they work closely with IT and business teams to ensure compliance with regulations and industry standards, and they often play a key role in incident response and security awareness training.

What are the key skills and qualifications needed to thrive as a senior information security risk analyst?

A Senior Information Security Risk Analyst requires a deep understanding of cybersecurity frameworks, risk assessment methodologies, and regulatory compliance, usually backed by a degree in information security or a related field. Familiarity with tools like risk management software (e.g., Archer, RSA), SIEM systems, and certifications such as CISSP, CISM, or CRISC are typically expected. Exceptional analytical thinking, attention to detail, and strong communication skills set top performers apart in this role. These competencies are crucial to effectively identify, evaluate, and mitigate security risks, ensuring the organization's information assets remain protected against evolving threats.

How does a senior information security risk analyst typically collaborate with other departments to manage organizational risk?

A Senior Information Security Risk Analyst regularly works with various departments such as IT, legal, compliance, and business units to identify and address security risks. This collaboration often includes conducting risk assessments, reviewing new projects for potential vulnerabilities, and providing guidance on security best practices. Effective communication skills are essential, as the analyst must translate technical risks into business impacts and help teams implement appropriate controls. Close teamwork ensures that security is integrated into all business processes and that the organization remains compliant with relevant regulations.

What is the difference between Senior Information Security Risk Analyst vs Information Security Analyst?

AspectSenior Information Security Risk AnalystInformation Security Analyst
CertificationsCISSP, CISA, CRISCCISSP, Security+, CEH
Work EnvironmentFocus on risk assessment, policy development, and strategic planningImplementing security measures, monitoring, and incident response
Employer & Industry UsageFinancial, healthcare, and large enterprises with complex security needsVariety of industries, including tech, retail, and government

Senior Information Security Risk Analysts typically handle advanced risk assessments and strategic security planning, often requiring certifications like CISSP or CISA. Information Security Analysts focus on implementing security controls and monitoring systems. Both roles are vital in maintaining organizational security but differ in scope and seniority.

What are popular job titles related to Senior Information Security Risk Analyst jobs in Houston, TX?

For Senior Information Security Risk Analyst jobs in Houston, TX, the most frequently searched job titles are:

What job categories do people searching Senior Information Security Risk Analyst jobs in Houston, TX look for?

The top searched job categories for Senior Information Security Risk Analyst jobs in Houston, TX are:

What cities near Houston, TX are hiring for Senior Information Security Risk Analyst jobs?

Cities near Houston, TX with the most Senior Information Security Risk Analyst job openings:

Senior Information Security Risk Analyst jobs near you
Infographic showing various Senior Information Security Risk Analyst job openings in Houston, TX as of August 2026, with employment types broken down into 1% As Needed, 74% Full Time, 21% Part Time, 2% Temporary, and 2% Contract. Highlights an 92% Physical, 3% Hybrid, and 5% Remote job distribution, with an average salary of $116,103 per year, or $55.8 per hour.

Senior Information Security Analyst

INSPYR Solutions

Houston, TX • On-site

Other

Posted 13 days ago

Job description

Title: Senior Information Security Analyst
Location: Hybrid in either Houston or Austin, TX (Primarily remote with in-office visits as needed)
Duration: Permanent, Direct-Hire
Work Requirements: s, Holders or Authorized to Work in the US.
Top Skills Required:
  • Strong experience in Azure Sentinel is a requirement for this position
  • Strong skills in Security Operations is critical, including incident management and response, threat investigations, etc.

Job Description:
This is a role with our external client, who is a global lawfirm. The Senior Information Security Analyst is one of several senior analyst roles within the firm''s global Security Operations (SOC) team. Each Senior Analyst provides technical leadership in the SOC''s day-to-day monitoring, detection and response activities, hunts for emerging adversary activity, and continuously improves the firm''s ability to detect and respond to threats at speed.
The role is part of a worldwide team empowered to operate the activities within its assigned function. Daily activities focus on security monitoring, event and incident triage, incident response, request management, detection engineering and proactive threat hunting, with direction provided by the Information Security Manager.
Key responsibilities include, but are not limited to:
Security Monitoring, Detection & Response
  • Operate and manage security incidents and requests to SLA guidelines, acting as an intermediate escalation point for complex investigations.
  • Monitor, triage and investigate alerts across endpoints, cloud, identity, email and network telemetry, reviewing and escalating unusual event behavior.
  • Lead structured incident response aligned to a recognized lifecycle, including containment, eradication, recovery, evidence preservation and digital forensic analysis as authorized.
  • Triage and remediate phishing, vishing and impersonation attacks in a timely and efficient manner as the risk dictates.
  • Configure and tune appropriate security parameters in monitoring systems and act as a technical point of escalation for alerted issues.

Detection Engineering & Threat Hunting
  • Conduct proactive, hypothesis-driven threat hunting on a scheduled basis to identify adversary activity not surfaced by existing detections.
  • Design, test, tune and maintain detection rules and use cases (e.g. Sigma / KQL), and map detection coverage to the MITRE ATT&CK framework to identify and close detection gaps.
  • Maintain technical awareness of adversary tradecraft, emerging attack techniques and threat intelligence relevant to the legal sector, translating these into new or improved detections.
  • Automation & AI-Enabled Operations
  • Develop and maintain security automation and orchestration (SOAR) playbooks to streamline incident response and automate repetitive operational tasks.
  • Use AI-assisted detection, triage and investigation tooling effectively, and critically validate, tune and quality-assure AI-generated findings and recommendations

Governance, Improvement & Leadership
  • Act as a technical mentor for junior and peer analysts, supporting skills development and succession planning within the region.
  • Take ownership of one or more SOC processes, functions or technologies globally, ensuring their continued maintenance and improvement.
  • Assist with development and maintenance of SOC playbooks, runbooks, monitoring configuration and standard operating procedures, identifying improvements and reporting on incidents

Required Experience and Skills:
  • Technical bachelor''s degree or equivalent IT / Information Security experience (required).
  • At least 5 years'' experience working within security operations or Information Security infrastructure, or a strong vocation and demonstrable transferable experience from another technical discipline.
  • Proven ability to adapt quickly to emerging threats or new information, shifting focus as needed.
  • Demonstrated expertise in Microsoft 365 Defender and Microsoft Sentinel for detecting, investigating and responding to suspicious and anomalous activity.
  • Strong knowledge of core security technologies (firewalls, IDS/IPS, EDR, SIEM) and of structured incident-response methodologies (e.g. NIST).
  • Working knowledge of endpoint security and monitoring infrastructure (EDR, DLP, removable-media encryption) and of cloud-based web and email security solutions (e.g. Zscaler, Mimecast, Proofpoint, Cisco).
  • Ability to triage and remediate phishing and impersonation attacks in a timely and efficient manner as the risk dictates.
  • Experience working with a service management tool (e.g. ServiceNow).

In addition to the core foundation above, the Senior Analyst must bring demonstrable, in-depth expertise in at least one of the following domains, with solid working knowledge across the remainder:
  • Identity & Access — deep experience detecting and responding to identity-based attacks across Active Directory and Entra ID / Azure AD, including conditional access, privileged access, authentication protocols and identity threat detection and response (ITDR).
  • Cloud Security — deep experience monitoring and responding to threats across a major cloud platform (Azure, AWS or Google Cloud Platform), including cloud logging and telemetry, posture signals, and cloud-native detection and response.
  • Windows & Linux Operating Systems — deep host-level investigation and forensic capability across both Windows and Linux, including event log and audit analysis, process and memory investigation, and OS hardening.
  • Security Automation & Detection Engineering — advanced scripting (PowerShell and/or Python) and SOAR playbook development, and/or detection engineering (Sigma / KQL) to automate response and expand detection coverage at scale.

Preferred Certifications
One or more of the following certifications are preferred:
  • Security Operations / SIEM: Microsoft SC-200 (Security Operations Analyst), GIAC GSOC
  • Incident Handling & Response: GIAC GCIH, Blue Team Level 1 (BTL1)
  • Specialist Technical Certifications: AZ-500 (Azure Security Engineer), SC-300 (Microsoft Identity and Access Administrator), GCFA (GIAC Certified Forensic Analyst), GCFE (GIAC Certified Forensic Examiner), GIAC GPYC (Python Coder)
  • Foundational / Broad Security Certifications: CompTIA Security+, GIAC GSEC, CISSP, CCSP

The Team:
The Security Operations (SOC) team is a dedicated sub-team of Global Information Security responsible for near-24x7 monitoring, detection and response to security incidents. Operating in shifts across time zones, the team is the firm''s first line of defense against cyber threats, triaging alerts from multiple sources and acting swiftly to contain and remediate when a threat is confirmed, collaborating with regional IT teams to prevent recurrence.
The wider Information Security function is responsible for ensuring the overall effectiveness of the control framework and managing security incidents. The team works with unified principles and processes around the world while maintaining regional stakeholder relationships. It adheres to the international standard ISO/IEC 27001 and reports to the Firm''s Global CISO.
About INSPYR Solutions
Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients'' business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.
INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, INSPYR Solutions complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities.

Apply