Cyber Security Review Program Lead

About the role

The Senior Security Engineer plays a crucial role in identifying, assessing, and communicating cyber and IT risks to support effective enterprise risk management. They own the design, governance, and delivery of the Cyber Security Review program, serving as the subject matter expert for how the organization identifies and manages cyber and IT risk.

Responsibilities

• Own the end-to-end design, governance, and continuous improvement of the Cyber Security Review program, including methodology, standards, intake processes, and review frameworks that ensure consistent and scalable execution.
• Lead reviews of new technology projects, purchases, and organizational changes, ensuring cyber and IT risk considerations are identified and addressed before implementation.
• Conduct re-reviews of existing critical applications, identifying control gaps, emerging risks, and areas requiring remediation or formal risk acceptance.
• Manage the relationship, execution, and oversight of our external managed service provider supporting the security review process.
• Define and maintain meaningful program metrics, reporting, and stakeholder communications that create transparency into review activity, risk findings, and program performance.
• Identify and execute on opportunities to improve program effectiveness through process innovation, tooling, automation, or the application of emerging technologies such as AI.
• Partner with the Engineering Service Lead and Service Manager to align program strategy with broader service objectives, contributing to roadmaps and capability development.

Requirements

• 6+ years of experience in security engineering, risk management, or a related technical discipline within a large enterprise environment.
• Demonstrated experience owning or leading a security review, risk assessment, or related program, including responsibility for methodology design, process governance, and delivery outcomes.
• Deep technical experience across a broad range of technologies to support thorough and effective security assessments.
• Experience conducting security reviews of technology projects, system changes, or application portfolios, with the ability to identify control gaps, design weaknesses, and areas of elevated risk.
• Strong process design and improvement experience, with the ability to build structured, repeatable, and scalable review processes from the ground up or mature existing ones.
• Experience engaging independently with technical and non-technical stakeholders, balancing constructive partnership with objective, independent challenge.

Qualifications

• Familiarity with project intake, change management, or architecture review processes, and how security risk oversight integrates into those workflows.
• Risk management experience aligned with frameworks such as NIST Cybersecurity Framework, COBIT 2019, or the NIST Privacy Framework.
• Experience building or maturing a security review program, including developing standards, templates, or playbooks that drive consistency at scale.
• Previous experience as a senior individual contributor, acting lead, or subject matter authority, with a track record of influencing outcomes without formal people management responsibilities.
• Strong interpersonal skills with the ability to establish credibility, build trust, and drive alignment across technical and business stakeholders.
• Experience working in a global organization, partnering with stakeholders across multiple time zones.

Skills

• Project intake, change management, or architecture review processes.
• NIST Cybersecurity Framework, COBIT 2019, or the NIST Privacy Framework.
• Security review program development and maturation.
• Process design and improvement.
• Stakeholder engagement and collaboration.
• Global organizational experience.

Benefits

• Medical, Dental, Vision, and Wellbeing Reimbursement Account.
• Paid Time Off, Holiday Schedules, and Financial Planning Time Off.
• Paid Parental Leave and Adoption Assistance Program.
• Competitive 401k savings plan with company match and an additional contribution regardless of participation.

Pay

• Newport Beach: $137K - $168K
• Omaha: $118K - $145K

Schedule

This role is classified as hybrid, working four days per week on-site and one day remote.