1

Telecommute Security Risk Assessment Jobs in California

... security risk, or a related GRC role * Demonstrated ability to independently assess vendor risk rather than relying on questionnaire responses alone, fluent in reading SOC 2 reports, ISO certificates ...

Product Security Engineer - Hardware/Firmware

Milpitas, CA · On-site

$147K - $244K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

Security Risk Assessment & Threat Modeling * Facilitate product security risk assessments and support threat modeling activities across firmware-driven products. * Assess product security risks ...

The Compliance Assessor of IT Risk & Compliance Management performs Security Risk Assessments on DIRECTV's 3rd party vendors. An assesment would typically involve the following tasks: Communicating ...

Generate detailed assessment reports outlining findings, risk levels, and recommendations for ... Telecommuting Allowed for this position** Minimum Requirements: Master's Degree in Cyber Security ...

Perform risk assessments to address security threats, changes to systems and/or applications, process improvement initiatives, supplier assessments (including downstream outsourcers) and other ...

Generate detailed assessment reports outlining findings, risk levels, and recommendations for ... Telecommuting Allowed for this position** Minimum Requirements: Master's Degree in Cyber Security ...

Lead Security Analysis

Dublin, CA · On-site

$124K - $212K/yr

This includes performing risk assessments, tracking mitigation efforts and developing risk metrics and risk reports. This position is also responsible for leading security risk related projects and ...

Lead Security Analysis

Dublin, CA · On-site

$124K - $212K/yr

This includes performing risk assessments, tracking mitigation efforts and developing risk metrics and risk reports. This position is also responsible for leading security risk related projects and ...

Lead Security Analysis

Dublin, CA · On-site

$124K - $212K/yr

This includes performing risk assessments, tracking mitigation efforts and developing risk metrics and risk reports. This position is also responsible for leading security risk related projects and ...

Showing results 21-40

Telecommute Security Risk Assessment information

What is the difference between Telecommute Security Risk Assessment vs Cybersecurity Analyst?

AspectTelecommute Security Risk AssessmentCybersecurity Analyst
CredentialsCertifications like CISSP, CISA, CompTIA Security+Certifications like CISSP, CEH, CompTIA Security+
Work EnvironmentRemote, often client-site assessments, flexible hoursOffice or remote, monitoring security systems, analyzing threats
Industry UsageRisk assessments for remote work policies, complianceMonitoring and defending networks, incident response

While both roles require security certifications and involve cybersecurity principles, Telecommute Security Risk Assessments focus on evaluating remote work environments and compliance, whereas Cybersecurity Analysts actively monitor and defend networks against threats. The roles complement each other but differ in daily tasks and focus areas.

What are the most commonly searched types of Security Risk Assessment jobs in California?

The most popular types of Security Risk Assessment jobs in California are:

What cities in California are hiring for Telecommute Security Risk Assessment jobs?

Cities in California with the most Telecommute Security Risk Assessment job openings:

Third Party Risk Management Lead

Jobtailor

Foster City, CA • On-site

$150 - $230/hr

Other

Posted 10 days ago


Job description

Responsibilities
  • Run substantive third‑party risk management (TPRM), independently evaluating real risk, not just processing questionnaire responses
  • Review SOC 2 reports, pen test findings, and architecture documentation to form an independent view of vendor risk, extending the same rigor to AI/model providers
  • Partner with Legal on vendor and AI contract terms, including DPAs, subprocessor agreements, and AI‑specific provisions
  • Review contracts for non‑standard security language when flagged by Legal or deal desk, and recommend redlines
  • Maintain the vendor and AI/model risk register, feeding findings into the company's master risk register
  • Enable sales through maturing the customer trust program
  • Build the capability for continuous monitoring of vendor ecosystem
Requirements
  • 8+ years in third‑party/vendor risk management, security risk, or a related GRC role
  • Demonstrated ability to independently assess vendor risk rather than relying on questionnaire responses alone, fluent in reading SOC 2 reports, ISO certificates, pen test summaries, and architecture documentation
  • Experience reviewing or redlining security and data‑handling contract language, ideally in partnership with a legal team
  • Working knowledge of data privacy fundamentals (GDPR, CCPA) as they relate to vendor and subprocessor relationships
  • Strong cross‑functional collaboration skills — this role touches Legal, Engineering, Product, and Sales regularly
  • Experience building repeatable, scalable vendor review processes rather than inheriting an existing one
  • Bonus Qualifications include direct experience assessing foundation model providers or AI/ML vendors specifically
Core Competencies

Expertise in third‑party risk management, including independent vendor risk assessment and contract review, with a strong understanding of data privacy regulations and the ability to collaborate across multiple functions. Proven capability in building scalable vendor review processes and maintaining comprehensive risk registers.

#J-18808-Ljbffr