ZipRecruiter

Log In

1

Sr Risk And Vulnerability Analyst Jobs in Riverside, CA

HUB

Senior Risk Consultant

Riverside, CA

As a Senior Risk Consultant based in the Los Angeles/Orange County area, you will be the primary ... Conduct loss analysis and trending to identify client focus areas and demonstrate measurable ...

next page

Showing results 1-20

All JobsSr Risk And Vulnerability Analyst JobsSr Risk And Vulnerability Analyst Jobs in Riverside, CA

Sr Risk And Vulnerability Analyst information

See Riverside, CA salary details

$55.8K

$114.6K

$148.7K

How much do sr risk and vulnerability analyst jobs pay per year?

As of Jul 27, 2026, the average yearly pay for sr risk and vulnerability analyst in Riverside, CA is $114,599.00, according to ZipRecruiter salary data. Most workers in this role earn between $94,400.00 and $142,900.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Sr Risk and Vulnerability Analyst, and why are they important?

To thrive as a Sr Risk and Vulnerability Analyst, you need in-depth knowledge of cybersecurity principles, risk assessment methodologies, and a relevant degree or certifications such as CISSP or CEH. Proficiency with vulnerability scanning tools (e.g., Nessus, Qualys), SIEM systems, and risk management frameworks (like NIST or ISO 27001) is typically required. Strong analytical thinking, attention to detail, and effective communication skills help you interpret complex data and collaborate across teams. These competencies are vital for identifying threats, reducing organizational risk, and ensuring robust security defenses.

What are some common challenges faced by a Sr Risk and Vulnerability Analyst, and how can they be addressed?

Sr Risk and Vulnerability Analysts often encounter challenges such as staying updated with rapidly evolving threats, managing a large volume of vulnerabilities, and effectively communicating risks to non-technical stakeholders. Addressing these challenges involves continuous learning, leveraging automated tools for vulnerability management, and developing strong reporting and presentation skills to translate technical findings into actionable business insights. Collaboration with IT, security teams, and business leaders is essential to prioritize and remediate risks efficiently.

What is the difference between Sr Risk And Vulnerability Analyst vs Risk Analyst?

AspectSr Risk And Vulnerability AnalystRisk Analyst
CertificationsCertifications like CISSP, CISA often preferredSimilar certifications, often entry to mid-level
Work EnvironmentFocus on cybersecurity vulnerabilities and risk management in ITBroader risk assessment across financial, operational, or strategic areas
Employer & Industry UsageCommon in cybersecurity, IT, finance sectorsUsed across various industries including finance, insurance, and consulting

The Sr Risk And Vulnerability Analyst specializes in identifying and mitigating cybersecurity vulnerabilities, often requiring advanced certifications and experience. In contrast, a Risk Analyst has a broader scope, assessing risks across multiple business areas. Both roles require analytical skills but differ in focus and industry application.

What does a Sr Risk and Vulnerability Analyst do?

A Sr Risk and Vulnerability Analyst is responsible for identifying, assessing, and mitigating risks and vulnerabilities within an organization’s information systems and processes. They conduct security assessments, analyze potential threats, and recommend strategies to protect assets and data. Their role often involves collaborating with IT, compliance, and management teams to develop risk management policies and respond to emerging security issues. Additionally, they may lead vulnerability testing and ensure the organization meets regulatory and industry standards for cybersecurity.
What are popular job titles related to Sr Risk And Vulnerability Analyst jobs in Riverside, CA? For Sr Risk And Vulnerability Analyst jobs in Riverside, CA, the most frequently searched job titles are:
What job categories do people searching Sr Risk And Vulnerability Analyst jobs in Riverside, CA look for? The top searched job categories for Sr Risk And Vulnerability Analyst jobs in Riverside, CA are:
What cities near Riverside, CA are hiring for Sr Risk And Vulnerability Analyst jobs? Cities near Riverside, CA with the most Sr Risk And Vulnerability Analyst job openings:
Sr Risk And Vulnerability Analyst jobs near you
Infographic showing various Sr Risk And Vulnerability Analyst job openings in Riverside, CA as of July 2026, with employment types broken down into 1% Locum Tenens, 1% Internship, 83% Full Time, 9% Part Time, 1% Temporary, and 5% Contract. Highlights an 82% Physical, 5% Hybrid, and 13% Remote job distribution, with an average salary of $114,599 per year, or $55.1 per hour.
Sr. Risk Operation Analyst - Integrated Risk Management "IRM"

Sr. Risk Operation Analyst - Integrated Risk Management "IRM"

Hyundai Autoever America

Irvine, CA • On-site

Full-time

Posted 19 days ago

Job description

Integrated Risk Management, Sr. Risk Operations Analyst
Location – Irvine, CA
Company Overview 
Hyundai AutoEver America (HAEA), the dynamic IT powerhouse behind Hyundai Motor Corporation, a Fortune 500 global leader in the automotive industry. As a key affiliate, we provide cutting-edge IT services and support to top brands including Kia, Genesis, Hyundai Translead, Hyundai Mobis, Hyundai Capital, and Glovis.
HAEA offers a truly global and collaborative environment. Here, you’ll drive innovation, boost operational efficiency, and help shape the future of mobility for the Hyundai Motor Group.
At HAEA, we understand that IT is the cornerstone of today’s fast-evolving digital world. By uniting all IT resources under one roof, we deliver consistent, top-quality solutions while serving as the crucial information link between Hyundai’s Global Headquarters and North American operations.
If you’re passionate about technology and eager to make a real impact at a world-class company, Hyundai AutoEver America is the place to grow your career. Join us and be part of the transformation that’s driving the future of automotive innovation.
What You Will Be Doing
The Risk Operations Senior Analyst plays a critical role within the Integrated Risk Management team, supporting the CISO organization by operating and continuously improving core technology risk processes. This role is responsible for maintaining the technology control library, policies, and standards, and for executing risk operations including Technology Risk Assessments, Risk Issue Management, and Risk Exception Management.
The role also owns risk data integrity and reporting, producing dashboards and insights that track remediation progress, risk posture, and control effectiveness across the organization.
This position requires a blend of risk expertise, operational rigor, stakeholder management, and strong analytical and reporting skills. The key responsibilities of this role are as described below:
Technology Control Framework & Documentation
  • Maintain and evolve the enterprise technology control library, ensuring alignment with internal policies, standards, and external frameworks (e.g., NIST CSF 2.0, ISO 27001, CIS).
  • Own the lifecycle management of technology risk policies and standards, including updates, reviews, approvals, and communications.
  • Ensure controls, policies, and standards are clearly mapped to regulatory, legal, and business requirements.

Risk Operations Execution
  • Run and continuously improve core Risk Operations processes, including:
    • Technology Risk Assessments (consistently assessing the inherent risk, control effectiveness within the environment )
    • Risk Issue Management (identification, validation, remediation tracking, closure)
    • Risk Exception Management (intake, assessment, approvals, renewals, expirations)
  • Ensure risk processes are executed consistently, on time, and in accordance with defined methodologies.
  • Act as a subject matter expert for risk process guidance to technology, security, and business teams.

Risk Tracking, Reporting & Dashboards
  • Design, build, and maintain risk dashboards and reporting that provide transparency into:
    • Open risk issues and remediation status
    • Exception volumes, aging, risk aggregation and trends
    • Risk assessment outcomes and key risk indicators (KRIs)
  • Translate risk data into meaningful insights for senior leadership, customers and risk committees.
  • Ensure accuracy, completeness, and audit-readiness of risk data across systems.

Stakeholder & Governance Engagement
  • Partner closely with Customers, Senior and Executive Leaders, Legal and other groups, to drive timely remediation and risk ownership.
  • Support internal and external audits, regulatory inquiries, and risk governance forums with clear documentation and reporting.

Process Improvement & Tooling
  • Identify opportunities to streamline and automate risk operations workflows.
  • Support enhancements to GRC and risk tooling, including requirements definition, testing, and adoption.
  • Contribute to the maturation of the Integrated Risk Management operating model.

Basic Qualifications:
  • Experience: 7+ years of experience in Technology Risk, Cyber Risk, GRC, or IT Risk Management. Hands-on experience running technology risk assessments, issue management, exception processes and maintaining control libraries, policies, and standards. Familiarity with GRC platforms.
  • Education: Bachelor’s degree in Cybersecurity, Information Technology, Computer science or a related field.
  • Technical Expertise: Strong knowledge of technology control frameworks (e.g., NIST CSF/800-53, ISO 27001, CIS). Proven ability to create risk dashboards and executive-level reporting. Strong analytical, documentation, and process design skills
  • Language Skills: Excellent stakeholder management and communication skills. Proficient in English for effective communication and coordination.

Preferred Qualifications:
  • Experience: Team leadership experience working within a CISO organization or large enterprise technology environment.  Implementation or maintenance experience with GRC platforms. 5+yrs experience in a top tier professional services firm, performing technology audit and/or risk management engagements.
  • Education and Certifications: Masters degree in Cybersecurity, Information Technology, Computer Science or a related discipline is preferred. Industry-recognized credentials such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementer are highly desirable.
  • Language Skills: Bi-lingual in English and Korean language proficiency is preferred to support global coordination and communication.

Team Culture:
The team fosters a high-performance, collaborative environment centered around proactive technology risk management and excellent customer service. Members are expected to lead with accountability, communicate effectively across functions, and adapt to dynamic challenges. The culture values technical excellence, continuous improvement, and global coordination, ensuring technology risks are well managed.
Base Salary Range: $120,000 - $170,000
Our Company adheres to the equal employment opportunity guidelines set forth by federal, state and local laws. The information requested on this form is sought in good faith and will not be used to discriminate against the applicant based on race, religion or creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic characteristics, marital status, sex or gender (which includes pregnancy, childbirth, or related circumstances), gender identity, gender expression, age, citizenship, sexual orientation, family care or medical leave status, military and veteran status, political affiliation, or any other characteristic protected by federal, state and local laws. Our Company adheres to the equal employment opportunity guidelines set forth by federal, state and local laws. The information requested on this form is sought in good faith and will not be used to discriminate against the applicant based on race, religion or creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic characteristics, marital status, sex or gender (which includes pregnancy, childbirth, or related circumstances), gender identity, gender expression, age, citizenship, sexual orientation, family care or medical leave status, military and veteran status, political affiliation, or any other characteristic protected by federal, state and local laws.

Powered by JazzHR

1wu1fqDvgb