ZipRecruiter

Log In

1

Sr Risk And Vulnerability Analyst Jobs in Madison, WI

Type One Energy

Cyber Security Analyst

Madison, WI · On-site

  • Retirement

... the Senior Cybersecurity Engineer. This is a foundational role with a clear trajectory. In the ... Our FusionDirect development program pursues the lowest-risk, shortest-schedule path to a fusion ...

Mercyhealth

Cybersecurity GRC Analyst - Hybrid

Janesville, WI · Hybrid

$85K - $137K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • PTO

... Risk Management (GRC/IRM) platforms (e.g. Apptega, Archer, ServiceNow) * Experience with email security platforms (e.g. Knowbe4, Proofpoint Zen) * Familiarity with vulnerability scanners and SOC ...

Craft3

Credit Risk

Oregon, WI · On-site

$90 - $120/hr

  • Medical

  • Dental

  • Vision

  • Retirement

  • PTO

Reporting to the Director of Credit Risk, the Sr. Underwriter at Craft3 underwrites commercial loans and conducts financial analysis for prospective and existing borrowers. This role supports lenders ...

New

previous page

Showing results 41-60

All JobsSr Risk And Vulnerability Analyst JobsSr Risk And Vulnerability Analyst Jobs in Madison, WI

Sr Risk And Vulnerability Analyst information

See Madison, WI salary details

$53.9K

$110.7K

$143.6K

How much do sr risk and vulnerability analyst jobs pay per year?

As of Aug 20, 2026, the average yearly pay for sr risk and vulnerability analyst in Madison, WI is $110,684.00, according to ZipRecruiter salary data. Most workers in this role earn between $91,200.00 and $138,000.00 per year, depending on experience, location, and employer.

What does a Sr Risk and Vulnerability Analyst do?

A Sr Risk and Vulnerability Analyst is responsible for identifying, assessing, and mitigating risks and vulnerabilities within an organization’s information systems and processes. They conduct security assessments, analyze potential threats, and recommend strategies to protect assets and data. Their role often involves collaborating with IT, compliance, and management teams to develop risk management policies and respond to emerging security issues. Additionally, they may lead vulnerability testing and ensure the organization meets regulatory and industry standards for cybersecurity.

What are the key skills and qualifications needed to thrive as a Sr Risk and Vulnerability Analyst, and why are they important?

To thrive as a Sr Risk and Vulnerability Analyst, you need in-depth knowledge of cybersecurity principles, risk assessment methodologies, and a relevant degree or certifications such as CISSP or CEH. Proficiency with vulnerability scanning tools (e.g., Nessus, Qualys), SIEM systems, and risk management frameworks (like NIST or ISO 27001) is typically required. Strong analytical thinking, attention to detail, and effective communication skills help you interpret complex data and collaborate across teams. These competencies are vital for identifying threats, reducing organizational risk, and ensuring robust security defenses.

What are some common challenges faced by a Sr Risk and Vulnerability Analyst, and how can they be addressed?

Sr Risk and Vulnerability Analysts often encounter challenges such as staying updated with rapidly evolving threats, managing a large volume of vulnerabilities, and effectively communicating risks to non-technical stakeholders. Addressing these challenges involves continuous learning, leveraging automated tools for vulnerability management, and developing strong reporting and presentation skills to translate technical findings into actionable business insights. Collaboration with IT, security teams, and business leaders is essential to prioritize and remediate risks efficiently.

What is the difference between Sr Risk And Vulnerability Analyst vs Risk Analyst?

AspectSr Risk And Vulnerability AnalystRisk Analyst
CertificationsCertifications like CISSP, CISA often preferredSimilar certifications, often entry to mid-level
Work EnvironmentFocus on cybersecurity vulnerabilities and risk management in ITBroader risk assessment across financial, operational, or strategic areas
Employer & Industry UsageCommon in cybersecurity, IT, finance sectorsUsed across various industries including finance, insurance, and consulting

The Sr Risk And Vulnerability Analyst specializes in identifying and mitigating cybersecurity vulnerabilities, often requiring advanced certifications and experience. In contrast, a Risk Analyst has a broader scope, assessing risks across multiple business areas. Both roles require analytical skills but differ in focus and industry application.

What cities near Madison, WI are hiring for Sr Risk And Vulnerability Analyst jobs?

Cities near Madison, WI with the most Sr Risk And Vulnerability Analyst job openings:

Sr Risk And Vulnerability Analyst jobs near you
Infographic showing various Sr Risk And Vulnerability Analyst job openings in Madison, WI as of August 2026, with employment types broken down into 1% As Needed, 85% Full Time, 10% Part Time, and 4% Contract. Highlights an 89% Physical, 4% Hybrid, and 7% Remote job distribution, with an average salary of $110,684 per year, or $53.2 per hour.

Senior Manager, Information Security

SHINE Technologies LLC

Janesville, WI • On-site

$140K - $175K/yr

Full-time

Posted 14 days ago

Job description

Job Type
Full-time
Description
SHINE Technologies is seeking a Senior Manager, Information Security who will be responsible for leading SHINE's enterprise information security program, with a balanced focus on cybersecurity governance, risk management, compliance, and oversight of operational security activities. The Senior Manager, Information Security provides strategic direction for SHINE's security posture, ensures alignment with regulatory and contractual obligations, and manages day to day security operations performed by IT staff.
This leader owns SHINE's security policies, the risk management framework, and the overall maturity of the information security program while partnering across IT, Engineering, Operations, Supply Chain, and other departments to embed security into organizational processes and technical decisions.
The base salary range for this position is $140,000 - $175,000 plus a comprehensive compensation package. Our salary ranges are determined by role, level, and location.
  1. Information Security Program Leadership
  • Lead SHINE's information security program, ensuring policies, controls, and processes are implemented and continuously improved.
  • Provide oversight and direction to Cybersecurity staff for operational tasks including monitoring, analysis, vulnerability scanning, and control implementation.
  • Maintain SHINE's Information Security Plan and ensure alignment with NIST 800 171, CMMC, ISO 27001/27002, NRC requirements, and internal standards.
  • Ensure proper integration of security requirements into IT systems, cloud platforms, and applicable OT/ICS environments.

2. Governance, Risk, & Compliance (Primary Focus)
  • Own the governance framework for information security, including policy management, standards, procedures, and control mappings.
  • Manage SHINE's cybersecurity risk management process, including maintaining the risk register and presenting treatment recommendations to leadership.
  • Lead compliance activities for NIST 800 171, CMMC, ISO, and other regulatory frameworks.
  • Coordinate internal and external audits, ensuring evidence is complete, accurate, and audit ready.
  • Conduct periodic assessments and internal reviews to validate ongoing compliance.

3. Strategic Planning & Program Maturity
  • Develop annual security improvement plans and budget recommendations based on business priorities and risk.
  • Identify gaps in security posture and propose operational, technical, and procedural enhancements.
  • Participate in cross functional project reviews and ensure security is integrated into new technologies, system changes, and enterprise initiatives.

4. Incident Response Leadership
  • Serve as a senior member of the Security Incident Response Team (SIRT).
  • Lead incident governance: escalation, communication, documentation, decision making, and after action reviews.
  • Direct technical incident response tasks performed by relevant IT Staff.
  • Maintain and improve incident response plans, communication models, and readiness processes.

5. OT/ICS Security Participation (Limited Scope)
  • Provide consultative security guidance for OT/ICS environments where cybersecurity risk, regulatory requirements, or system criticality justify involvement.
  • Support reviews of high risk OT changes to assess potential security impacts.
  • Partner with Engineering teams to apply appropriate security expectations to critical systems without imposing unnecessary operational burden.

6. Third Party & Customer Cybersecurity Requirements
  • Lead vendor security assessments and drive ongoing third party cybersecurity monitoring.
  • Serve as the primary responder for customer cybersecurity questionnaires, attestation requests, and contract driven security obligations.
  • Collaborate with Legal, Supply Chain, and Business Development to ensure cybersecurity terms are understood, feasible, and enforced.

7. Security Awareness & Workforce Engagement
  • Oversee the enterprise security awareness program.
  • Ensure workforce compliance with annual cybersecurity training and role specific requirements.
  • Coordinate with HR and Communications to deliver effective campaigns and reinforce a culture of security.

8. Reporting & Executive Communication
  • Produce and present information security metrics, risk summaries, and program updates for IT leadership and executive stakeholders.
  • Communicate security issues in clear, actionable terms tailored to both technical and non technical audiences.

Requirements
Required Experience
  • 7+ years of experience in information security, cybersecurity, risk management, or GRC.
  • Experience with NIST 800 171, CMMC, ISO 27001/27002, or similar frameworks.
  • Broad technical knowledge across networks, systems, cloud environments, and identity management.
  • Demonstrated experience leading audits, assessments, or governance programs.

Preferred Experience
  • Experience in regulated industries (nuclear, defense, medical, engineering, or manufacturing).
  • Familiarity with OT/ICS cybersecurity.
  • Experience maturing security programs in small or growing organizations.

Knowledge, Skills, and Abilities
  • Solid understanding of information security governance, risk management, and compliance frameworks.
  • Strong communication skills with the ability to translate complex risks into business relevant terms.
  • Excellent organizational and documentation skills.
  • Demonstrated leadership and ability to collaborate across diverse technical and business functions.
  • Ability to make informed decisions based on risk, business needs, and technical considerations.

Education & Certifications
  • Bachelor's degree in Information Security, Computer Science, IT, Engineering, or related field (or equivalent experience).
  • Preferred certifications: CISSP, CISM, CISA, CRISC, Security+, ISO 27001 Lead Implementer/Auditor.

Work Environment
  • Primarily office based with hybrid flexibility as appropriate.
  • Occasional work within secure or regulated environments.
  • May require after hours support during security incidents or operational needs.

Eligibility for employment is conditioned on the applicant's ability to qualify for access to information subject to U.S. Export Controls. Additionally, applicant's eligibility may be conditioned based upon meeting the Nuclear Regulatory Commission requirements for access to Safeguards Information, which typically requires a pre-employment drug screen, fingerprinting and criminal background check.
SHINE values diversity in all its forms as a critical component of innovation, which is fundamental to our success. Every member of the SHINE community benefits from the talents and experiences of our peers, from the mutual respect we exercise, and from the responsibility we take for our actions.
SHINE Technologies, LLC maintains affirmative action plans for individuals with disabilities and protected veterans. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.
Pay Transparency Policy
Employee Rights Under the NLRA
Equal Opportunity Employment
E-Verify

Apply