Monitor and assess the effectiveness of security controls and compliance initiatives Risk ... management and regulatory compliance * 5+ years of experience supporting or leading SOC 2 ...
Monitor and assess the effectiveness of security controls and compliance initiatives Risk ... management and regulatory compliance * 5+ years of experience supporting or leading SOC 2 ...
Data Security analyst
Columbus, OH · On-site
Review risk assessment questionnaires, perform information security control reviews and complete documentation for submission to risk management governance committees for approval or denial.
Data Security analyst
Columbus, OH · On-site
Review risk assessment questionnaires, perform information security control reviews and complete documentation for submission to risk management governance committees for approval or denial.
Security Administrator II
Marysville, OH · On-site
Risk Management * Perform risk assessments, generate risk reports/updates, tracking progress of remediation efforts. * Security Awareness * Facilitate and distribute communications to various ...
Security Administrator II
Marysville, OH · On-site
Risk Management * Perform risk assessments, generate risk reports/updates, tracking progress of remediation efforts. * Security Awareness * Facilitate and distribute communications to various ...
Prior work experience of risk management disciplines, security policies and standards, technology risk assessment, and third party supplier risk process and requirements * Current or previous ...
Prior work experience of risk management disciplines, security policies and standards, technology risk assessment, and third party supplier risk process and requirements * Current or previous ...
... management, information security, or a related field, with a focus on managing risk identification, assessment, and mitigation * Demonstrated expertise in risk management frameworks, industry ...
... management, information security, or a related field, with a focus on managing risk identification, assessment, and mitigation * Demonstrated expertise in risk management frameworks, industry ...
... management, information security, or a related field, with a focus on managing risk identification, assessment, and mitigation * Demonstrated expertise in risk management frameworks, industry ...
... management, information security, or a related field, with a focus on managing risk identification, assessment, and mitigation * Demonstrated expertise in risk management frameworks, industry ...
... management, information security, or a related field, with a focus on managing risk identification, assessment, and mitigation * Demonstrated expertise in risk management frameworks, industry ...
... management, information security, or a related field, with a focus on managing risk identification, assessment, and mitigation * Demonstrated expertise in risk management frameworks, industry ...
... management, information security, or a related field, with a focus on managing risk identification, assessment, and mitigation * Demonstrated expertise in risk management frameworks, industry ...
... management, information security, or a related field, with a focus on managing risk identification, assessment, and mitigation * Demonstrated expertise in risk management frameworks, industry ...
... security risk oversight for areas of the enterprise that manage technology. As part of this ... Review risks, controls and, conduct assessments to support effective oversight and compliance with ...
... security risk oversight for areas of the enterprise that manage technology. As part of this ... Review risks, controls and, conduct assessments to support effective oversight and compliance with ...
... risk assessments for initiatives. The position will oversee a team of security engineers and ... Manage a team of resources who serve as technical leads on security projects and business projects.
... risk assessments for initiatives. The position will oversee a team of security engineers and ... Manage a team of resources who serve as technical leads on security projects and business projects.
Prior work experience of risk management disciplines, security policies and standards, technology risk assessment, and third party supplier risk process and requirements. * Current or previous ...
Prior work experience of risk management disciplines, security policies and standards, technology risk assessment, and third party supplier risk process and requirements. * Current or previous ...
Prior work experience of risk management disciplines, security policies and standards, technology risk assessment, and third party supplier risk process and requirements. * Current or previous ...
Prior work experience of risk management disciplines, security policies and standards, technology risk assessment, and third party supplier risk process and requirements. * Current or previous ...
Security Administrator
Marysville, OH · On-site
Prior work experience of risk management disciplines, security policies and standards, technology risk assessment, and third party supplier risk process and requirements * Current or previous ...
Security Administrator
Marysville, OH · On-site
Prior work experience of risk management disciplines, security policies and standards, technology risk assessment, and third party supplier risk process and requirements * Current or previous ...
Familiarity with risk management frameworks, industry standards, and technology regulatory requirements. * Proficient knowledge and expertise in resiliency, data security, risk assessment & reporting ...
Familiarity with risk management frameworks, industry standards, and technology regulatory requirements. * Proficient knowledge and expertise in resiliency, data security, risk assessment & reporting ...
Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements. * Proficient knowledge and expertise in data security, risk assessment & reporting ...
Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements. * Proficient knowledge and expertise in data security, risk assessment & reporting ...
Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements. * Proficient knowledge and expertise in data security, risk assessment & reporting ...
Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements. * Proficient knowledge and expertise in data security, risk assessment & reporting ...
Technology Risk and Controls Lead - Database
Columbus, OH · On-site
$142K - $200K/yr
Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements. * Proficient knowledge and expertise in data security, risk assessment & reporting ...
Technology Risk and Controls Lead - Database
Columbus, OH · On-site
$142K - $200K/yr
Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements. * Proficient knowledge and expertise in data security, risk assessment & reporting ...
Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements. * Proficient knowledge and expertise in data security, risk assessment & reporting ...
Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements. * Proficient knowledge and expertise in data security, risk assessment & reporting ...
Consulting Manager, Governance, Risk & Compliance (Workiva)
Columbus, OH · On-site
$120K - $156K/yr
Consulting Manager, Governance, Risk & Compliance (Workiva) Location: * Clearsulting is ... Conduct client discovery sessions to gather requirements, assess current-state processes, and ...
Consulting Manager, Governance, Risk & Compliance (Workiva)
Columbus, OH · On-site
$120K - $156K/yr
Consulting Manager, Governance, Risk & Compliance (Workiva) Location: * Clearsulting is ... Conduct client discovery sessions to gather requirements, assess current-state processes, and ...
Familiarity with risk management frameworks, industry standards, and technology regulatory requirements. * Proficient knowledge and expertise in resiliency, data security, risk assessment & reporting ...
Familiarity with risk management frameworks, industry standards, and technology regulatory requirements. * Proficient knowledge and expertise in resiliency, data security, risk assessment & reporting ...
Manager Security Risk Assessment information
See salary details
$51.5K - $62.3K
4% of jobs
$62.3K - $73K
6% of jobs
$73K - $83.8K
11% of jobs
$87.9K is the 25th percentile. Wages below this are outliers.
$83.8K - $94.6K
11% of jobs
The median wage is $103.2K / yr.
$94.6K - $105.4K
23% of jobs
$105.4K - $116.1K
13% of jobs
$123.2K is the 75th percentile. Wages above this are outliers.
$116.1K - $126.9K
12% of jobs
$126.9K - $137.7K
8% of jobs
$137.7K - $148.5K
6% of jobs
$148.5K - $159.2K
4% of jobs
$159.2K - $170K
2% of jobs
$51.5K
$111.6K
$170K
How much do manager security risk assessment jobs pay per year?
As of Jul 13, 2026, the average yearly pay for manager security risk assessment in the United States is $111,556.00, according to ZipRecruiter salary data. Most workers in this role earn between $90,000.00 and $129,000.00 per year, depending on experience, location, and employer.
What cities are hiring for Manager Security Risk Assessment jobs? Cities with the most Manager Security Risk Assessment job openings:
What states have the most Manager Security Risk Assessment jobs? States with the most job openings for Manager Security Risk Assessment jobs include:
What are the most commonly searched types of Security Risk Assessment jobs? The most popular types of Security Risk Assessment jobs are:
Full-time
Medical, Dental, Vision, Retirement, PTO
This job post has expired today. Applications are no longer accepted.
APCO Holdings rating
7.9
Based on 9 frontline employees who took The Breakroom Quiz
158th of 281 rated insurance
Job description
APCO Holdings partners with dealerships across North America to deliver innovative vehicle protection products and services that enhance the ownership experience for customers and drive growth for our partners. Through our family of brands, we bring together industry expertise, technology, and data-driven insights to help dealers strengthen their finance and insurance performance and build lasting relationships with their customers.
Our teams work collaboratively across operations, technology, risk, finance, marketing, and sales to deliver solutions that create measurable value and support the continued growth of APCO and the partners we serve.
We are looking for a Senior Security Risk & Compliance Analyst to support and strengthen APCO's security governance, risk, and compliance (GRC) initiatives. In this role, you will help drive compliance efforts, assess security controls, identify risks, and support the organization's ongoing commitment to maintaining a strong security posture and regulatory compliance.
What You'll Do
Security Compliance & Governance
- Collaborate across departments to ensure alignment with security compliance frameworks and regulatory requirements (SOC 2, NYCRR, FTC Safeguards Rule, etc.)
- Conduct security control mapping and compliance reconciliation activities
- Support the development, implementation, and maintenance of security policies, standards, and procedures
- Monitor and assess the effectiveness of security controls and compliance initiatives
Risk Assessment & Mitigation
- Identify, assess, and prioritize security risks across systems, processes, and operations
- Partner with stakeholders to develop remediation plans and mitigation strategies
- Provide recommendations on security best practices and control implementations
- Conduct regular security audits and compliance assessments
Reporting & Documentation
- Maintain documentation related to audits, risk assessments, remediation efforts, and compliance activities
- Prepare reports and dashboards on compliance status, risks, KPIs, and trends for leadership
- Track remediation efforts and support continuous improvement initiatives
Security Awareness & Collaboration
- Support development and delivery of security awareness and training programs
- Promote a culture of security awareness and accountability across the organization
- Stay current on emerging threats, technologies, and evolving regulatory requirements
What Makes You Successful
You'll be successful in this role if you're highly analytical, detail-oriented, and passionate about security governance and compliance. You're comfortable evaluating risks, identifying gaps, and collaborating across teams to strengthen security controls and processes.
You're also a strong communicator who can translate complex compliance and security concepts into actionable guidance for both technical and non-technical stakeholders. You thrive in fast-paced environments and enjoy balancing strategic thinking with hands-on execution.
Basic Qualifications
- Bachelor's degree in Information Security, Information Technology, or a related field
- 8+ years of experience in IT security or related fields
- 5+ years of experience in risk management and regulatory compliance
- 5+ years of experience supporting or leading SOC 2 compliance efforts
- Strong understanding of security frameworks, controls, and regulatory requirements
Preferred Qualifications
- Professional certifications such as CISSP, CISM, or CISA
- Experience with compliance frameworks and regulations such as SOC 2, NYCRR, and FTC Safeguards Rule
- Experience conducting audits, risk assessments, and remediation tracking
- Experience working in regulated industries such as insurance or financial services
This Role Might Be a Great Fit If You...
- Enjoy identifying risks and improving security processes
- Thrive in cross-functional, collaborative environments
- Like balancing technical security concepts with governance and compliance
- Are motivated by protecting systems, data, and organizational integrity
What We Offer
- Competitive compensation
- Comprehensive medical, dental, and vision benefits
- 401(k) with company match
- Paid time off and company holidays
- Opportunities for professional growth and certification support
- A collaborative and security-focused work environment
At APCO, the way we work matters just as much as the results we deliver. Our values guide how we work, how we partner, and how we deliver results.
We C.A.R.E.
Committed - We build strong, high-trust relationships with our partners and each other.
Accountable - We take ownership of outcomes and hold ourselves to the highest standards of performance and integrity.
Results-Driven - We focus on delivering measurable outcomes that create value for our partners and our business.
Excellent - We strive for excellence in everything we do while balancing short-term performance with long-term success.
If you're excited about joining a team that values collaboration, accountability, and continuous improvement, we'd love to hear from you.
By submitting your application, you acknowledge that you have read and understand our Privacy Policy and Terms & Conditions. APCO Holdings may collect personal information (such as name, contact details, and employment history) to evaluate your candidacy. We may share this data with our subsidiaries, affiliates, and service providers. We retain applicant data only as long as necessary for the hiring process or as required by law.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
apply for this job
What APCO Holdings employees say
Pay
Benefits
Hours and flexibility
Workplace
Get the full story on Breakroom
About APCO Holdings
Sourced by ZipRecruiter
Industry
Motor vehicle manufacturing
Company size
501 - 1,000 Employees
Headquarters location
Norcross, GA, US
Year founded
1984