Security Risk Analyst
Job Description
The Security Risk Analyst works with the Head of Security Risk to provide operational support for the coordination and execution of the enterprise security risk management program. This position will assist in the conduct of risk assessments and management of the security risk register.
We are looking for a Security Risk Analyst who will play a key role as part of the Security Risk Management team. The successful candidate will have a strong background in the following areas:
Risk identification through the performance of risk assessments and other measures
Collaborating with stakeholders to implement and manage risk remediation activities
Responsibilities include:
Assist with the administration of the security risk management program in accordance with the NIST risk management framework and other security standards and related industry best practices.
Assisting in the conduct regular enterprise risk assessments to identify risk for new and existing projects.
Assist with the administration of the security risk register and related remediation activities.
Assist with the administration of the risk management information system.
Collaborate with technology and business stakeholders to prioritize risk and develop and document risk treatment plans in line with the enterprise risk appetite.
Assist with the development and maintenance of documentation on processes, procedures and reports in accordance with standards, regulations and industry best practices.
Maintain an understanding of emerging trends in information security threats and risks.
Minimum Qualifications:
Bachelor's or Master’s degree in Business, Information Technology, Computer Science or equivalent combination of education, certification (CISSP, CISM, CISA, CRISC, etc.) and experience
Must possess 3+ years’ experience in information technology, security, and/or compliance with at least 1-year experience in risk management
Understanding of cybersecurity risk/maturity practices and frameworks including NIST CSF, ISO 27001 and other similar industry standard frameworks & privacy related regulations
Excellent project management and organizational skills
Excellent communication, interpersonal skills and business judgment
Ensuring a diverse and inclusive workplace where we learn from each other is core to Zoom’s values. We welcome people of different backgrounds, experiences, abilities and perspectives including qualified applicants with arrest and conviction records as well as any qualified applicants requiring reasonable accommodations in accordance with the law.
We believe that the unique contributions of all Zoomies is the driver of our success. To make sure that our products and culture continue to incorporate everyone's perspectives and experience we never discriminate on the basis of race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status.
All your information will be kept confidential according to EEO guidelines.
Given Zoom’s status as a federal contractor, we are subject to President Biden’s Executive Order requiring COVID-19 vaccinations for all US employees. As such, Zoom requires all US employees, including remote employees, to be fully vaccinated. Zoom will consider requests for reasonable accommodations for religious or medical reasons as required under applicable law.
Explore Zoom:
Hear from our leadership team
Browse Awards and Employee Reviews on Comparably
Visit our Blog
Zoom with us!
Find us on social at the links below and on Instagram