Security Risk Assessor

About the organization

The organization operates in the cybersecurity and risk management industry, addressing challenges related to third-party risk and information security within highly regulated sectors such as financial services, energy, and healthcare. It delivers security risk assessments and mitigation strategies to help clients manage operational and cybersecurity risks effectively.

About the role

The Security Risk Assessor is responsible for conducting timely and effective security assessments in line with service level agreements and quality standards. This role contributes by independently managing assigned workloads, collaborating with internal and external partners to mitigate risks, and supporting account management activities. It plays a key role in maintaining the organization's service quality and client relationships.

Responsibilities

• Consistently deliver assigned workload within established deadlines and quality standards.
• Work independently while maintaining professional representation of the department.
• Collaborate with internal teams and third parties to identify and resolve third-party risks.
• Serve as a primary contact for clients and their third parties.
• Execute the Validated Controls Assessment workflow for assigned clients.
• Perform issue remediation reviews including identification, coordination, and closure recommendations.
• Support managers and account leaders with account management as needed.
• Perform other duties as assigned.

Requirements

• Minimum of 2 years experience in cybersecurity control reviews, risk management, or related fields.
• Experience in customer or client-facing environments.
• Knowledge of regulated industries such as financial services, energy, or healthcare.
• Understanding of risk management concepts and information security frameworks like NIST and ISO 27001.
• Strong attention to detail, judgment, and ability to meet deadlines in fast-paced environments.
• Effective communication and client relationship skills.
• Proficiency with Microsoft Office, Google products, and other business software.
• Ability to use and refine AI tools to enhance work processes.
• Associates degree required; Bachelor’s degree preferred.

Preferred qualifications

• Experience with Big 4 firms.
• Certifications such as CTPRP, CRISC, CISA, CISSP, or Security+.
• Proven ability to prioritize and manage challenging work objectives.

Pay

$67,832 to $94,212 per year, depending on experience and qualifications.

Benefits

• Remote and hybrid work options.
• Medical, dental, and vision insurance with up to 90% employee coverage and options for dependents.
• Company-paid life, short-term, and long-term disability insurance.
• Employee Assistance Program.
• 401(k) matching.
• Flexible paid time off.
• Parental leave.
• Professional growth opportunities including up-skilling, certifications, and tuition reimbursement.
• Employee referral programs and company-sponsored events.