ZipRecruiter

Log In

1

Senior Information Security Risk Analyst Jobs in Orem, UT

NICE

Senior Information Security Analyst, CX

Sandy, UT · On-site

Senior Information Security Analyst So, what's the role all about? The Information Security Analyst ... Conduct internal audits to evaluate and enhance IT controls, compliance with standards, and risk ...

NICE

Senior Information Security Analyst, CX

Sandy, UT · On-site

Senior Information Security Analyst So, what's the role all about? The Information Security Analyst ... Conduct internal audits to evaluate and enhance IT controls, compliance with standards, and risk ...

swirecc

Sr. IT Security Engineer

Draper, UT · On-site

$107K - $146K/yr

A Senior IT Security Engineer in Operations & Engineering supports the design, implementation, and ... Analyze security findings and recommend appropriate compensating controls or risk reduction ...

swirecc

Sr. IT Security Engineer

Draper, UT

$107K - $146K/yr

A Senior IT Security Engineer in Operations & Engineering supports the design, implementation, and ... Analyze security findings and recommend appropriate compensating controls or risk reduction ...

swirecc

Sr. IT Security Engineer

Draper, UT

$107K - $146K/yr

A Senior IT Security Engineer in Operations & Engineering supports the design, implementation, and ... Analyze security findings and recommend appropriate compensating controls or risk reduction ...

KēSTA I.T.

Sr. IT Security Engineer

Draper, UT · Hybrid

$100K - $130K/yr

T. is actively seeking a Sr. IT Security Engineer for an immediate full-time opportunity with our ... Analyze security findings and recommend appropriate compensating controls or risk-reduction ...

Swire Coca-Cola, USA

Sr. IT Security Engineer

Draper, UT · On-site

$107K - $146K/yr

A Senior IT Security Engineer in Operations & Engineering supports the design, implementation, and ... Analyze security findings and recommend appropriate compensating controls or risk reduction ...

Swire Coca-Cola, USA

Sr. IT Security Engineer

Draper, UT · On-site

$107K - $146K/yr

A Senior IT Security Engineer in Operations & Engineering supports the design, implementation, and ... Analyze security findings and recommend appropriate compensating controls or risk reduction ...

Jobtailor

Senior Information Security Engineer

Sandy, UT · On-site

$110 - $170/hr

Conduct security assessments, threat modelling, and risk analysis for products, infrastructure, and ... Information Security, Application Security, Security Engineering, or a related field * Strong ...

Clicklease

Senior Risk Analyst

Draper, UT · On-site

Senior Risk Analyst What you'll be doing: * Independently monitor and manage diverse lease portfolios, owning risk assessment and mitigation for assigned segments. * Design and produce portfolio ...

Orion

Senior Privacy & AI Risk Analyst

Lehi, UT · Hybrid

As a Senior Privacy & AI Risk Analyst, you will be expected to spearhead privacy initiatives and ... In coordination with Information Security Team, assist in Vendor Risk Assessments relating to ...

Clicklease

Risk Analyst

Draper, UT · On-site

As a Risk Analyst, you'll support data-driven decision-making by analyzing portfolio performance ... Investigate portfolio performance trends and escalate potential risks to senior team members.

Western Ag Credit

Risk Analyst

South Jordan, UT · On-site

$57K - $85K/yr

Risk Analyst LOCATION : South Jordan or Spanish Fork, Utah GRADE : 11 (salary range $57,283-$85,681 ... If you have any questions or need additional information, please call (801) 571-9200. Date: May 21 ...

next page

Showing results 1-20

All JobsInformation Security Risk Analyst JobsSenior Information Security Risk Analyst JobsSenior Information Security Risk Analyst Jobs in Orem, UT

Senior Information Security Risk Analyst information

See Orem, UT salary details

$27

$50

$65

How much do senior information security risk analyst jobs pay per hour?

As of Aug 17, 2026, the average hourly pay for senior information security risk analyst in Orem, UT is $50.81, according to ZipRecruiter salary data. Most workers in this role earn between $39.52 and $57.07 per hour, depending on experience, location, and employer.

What is the difference between Senior Information Security Risk Analyst vs Information Security Analyst?

AspectSenior Information Security Risk AnalystInformation Security Analyst
CertificationsCISSP, CISA, CRISCCISSP, Security+, CEH
Work EnvironmentFocus on risk assessment, policy development, and strategic planningImplementing security measures, monitoring, and incident response
Employer & Industry UsageFinancial, healthcare, and large enterprises with complex security needsVariety of industries, including tech, retail, and government

Senior Information Security Risk Analysts typically handle advanced risk assessments and strategic security planning, often requiring certifications like CISSP or CISA. Information Security Analysts focus on implementing security controls and monitoring systems. Both roles are vital in maintaining organizational security but differ in scope and seniority.

How does a senior information security risk analyst typically collaborate with other departments to manage organizational risk?

A Senior Information Security Risk Analyst regularly works with various departments such as IT, legal, compliance, and business units to identify and address security risks. This collaboration often includes conducting risk assessments, reviewing new projects for potential vulnerabilities, and providing guidance on security best practices. Effective communication skills are essential, as the analyst must translate technical risks into business impacts and help teams implement appropriate controls. Close teamwork ensures that security is integrated into all business processes and that the organization remains compliant with relevant regulations.

What are the key skills and qualifications needed to thrive as a senior information security risk analyst?

A Senior Information Security Risk Analyst requires a deep understanding of cybersecurity frameworks, risk assessment methodologies, and regulatory compliance, usually backed by a degree in information security or a related field. Familiarity with tools like risk management software (e.g., Archer, RSA), SIEM systems, and certifications such as CISSP, CISM, or CRISC are typically expected. Exceptional analytical thinking, attention to detail, and strong communication skills set top performers apart in this role. These competencies are crucial to effectively identify, evaluate, and mitigate security risks, ensuring the organization's information assets remain protected against evolving threats.

What does a senior information security risk analyst do?

A Senior Information Security Risk Analyst is responsible for identifying, evaluating, and mitigating risks to an organization's information systems and data. They conduct risk assessments, develop security policies, and recommend measures to protect against cyber threats and vulnerabilities. Additionally, they work closely with IT and business teams to ensure compliance with regulations and industry standards, and they often play a key role in incident response and security awareness training.

What are popular job titles related to Senior Information Security Risk Analyst jobs in Orem, UT?

For Senior Information Security Risk Analyst jobs in Orem, UT, the most frequently searched job titles are:

What job categories do people searching Senior Information Security Risk Analyst jobs in Orem, UT look for?

The top searched job categories for Senior Information Security Risk Analyst jobs in Orem, UT are:

Senior Information Security Risk Analyst jobs near you

Senior Information Security Analyst, CX

NICE

Sandy, UT • On-site

Full-time

Re-posted 7 days ago

Job description

Senior Information Security Analyst

So, what's the role all about?

The Information Security Analyst is primarily responsible for ensuring compliance with information security frameworks such as SOC, FedRAMP, PCI, ISO 27001, ISO 27701, ISO 42001, BSI C5, HITRUST, etc. This role focuses on internal audits, regulatory compliance, and readiness for external audits while also focusing on related information security initiatives.  

How will you make an impact?  

 Internal Audit Execution: Conduct internal audits to evaluate and enhance IT controls, compliance with standards, and risk management processes. 
 Audit Preparation: Assist internal control owners in scoping appropriate evidence and preparing for external audits. 
 Gap Assessments: Facilitate and/or conduct internal gap assessments and audit readiness evaluations for frameworks such as ISO 27001, StateRAMP, etc. 
 Framework Tracking: Monitor updates to Cyber Essentials, ISO, and regulatory frameworks and ensure internal alignment. 
 Control Documentation: Develop and maintain control narratives, walkthroughs, and documentation of compliance processes. 
 Audit Findings: Identify control deficiencies and work with stakeholders to recommend cost-effective, value-added remediation actions. 
 Compliance Reporting: Draft audit reports and present findings to management during status updates and closing meetings. 
 External Audit Coordination: Collaborate with external audit teams to streamline processes and provide requested documentation and evidence. 
 Security Monitoring: Use tools such as Rapid7 InsightIDR or other SIEM solutions to assist with security monitoring and incident detection. 
 Incident Response Support: Participate in incident response efforts, documenting security incidents and assisting in containment and recovery actions. 
 Threat Identification: Contribute to analyzing cybersecurity threats and implementing recommendations to improve the security posture. 
 Policy and Procedure Development: Assist in creating and refining cybersecurity policies and operational procedures to align with audit and compliance objectives. 
 Vulnerability Management: Support the tracking and remediation of vulnerabilities in coordination with IT and Security Operations teams. 

Have you got what it takes?

 Strong expertise in audit and compliance frameworks, including SOC, FedRAMP, PCI, ISO 27001, ISO 27701, ISO 42001, BSI C5, HITRUST, etc.
 Familiarity with CSOC tools such as Rapid7 InsightIDR or other SIEM solutions. 
 Hands-on experience in internal and external audits, compliance assessments, and process improvement. 
 Basic understanding of incident response frameworks and cybersecurity best practices. 
 Exceptional analytical, organizational, and communication skills. 
 Commitment to continuous learning and professional development in audit, compliance, and security. 

You will have an advantage if you also have:

 A Master's degree in Cybersecurity, Risk Management, or related fields is a plus. 
 Certifications (preferred or required): 
 Certified Information Systems Auditor (CISA) 
 Certified Information Security Manager (CISM) 
 Certified Information Systems Security Professional (CISSP) 
 ISO 27001 Lead Auditor or Implementer 
 Cyber Essentials Assessor (or equivalent) 
 GIAC certifications (e.g., GIAC Certified Incident Handler - GCIH or GIAC Security Essentials - GSEC) 

Apply