Cloud Security Risk Analyst & Controls Lead

Crane Worldwide Logistics; Houston (TX); On-site; USD 120,000 - 170,000; Full time

Job summary

Crane Worldwide Logistics is seeking a Sr. Security Risk Analyst to assess, rate, and remediate security risks across cloud and on‑premises environments. You will own risk metrics, lead vulnerability programs, and partner with engineering and IT teams to improve Crane's security posture.

The role emphasizes threat modeling, security frameworks, and compliance, with a focus on Azure/AWS, CI/CD security, and security monitoring tools.

Qualifications

• Bachelor’s Degree in Computer Science, Information Technology, Cybersecurity, or related field required.
• Minimum 7 years of experience working with security frameworks and implementing cyber security controls across a heterogenous environment.
• Experience with public cloud architecture, cloud strategy, networking, security, and compliance workload types.
• Knowledge of risk management frameworks and applying risk methodologies.

Responsibilities

• Support security team projects such as threat modeling, vulnerability scanning and audits.
• Lead security framework certification efforts.
• Design, develop, and implement IT security controls for cloud-based enterprise business systems that are aligned with policy and compliance requirements.
• Assist with vulnerability, risk, and security assessments of networks, hardware, and software.
• Develops, implements, and maintain security risk management processes that enable security risks to be identified, aggregated, tracked, and managed.
• Execute risk and threat analyst activities that include track, measure, validate, and report on risk identification, acceptances, and remediation efforts.
• Lead discussions, assessments, tracking, and overall reporting of technology security risks to support organizational cyber security objectives.
• Advises on acceptable mitigating controls related to Policy and Standard Exceptions.
• Assists in the development, dissemination, and management of security metrics to be used in monitoring and improving the company’s security posture and decision‑making.
• Provides ongoing maintenance of the security risk register.
• Manage the effectiveness of tooling, rationalizing tools as needed, and identifying new tool requirements as necessary.
• Define metrics and key performance indicators to determine the effectiveness of the Security automation program.
• Demonstrate technical leadership to manage and provide multiple technical solutions, establish, and enforce coding guidelines and best practices.
• Serve as an internal security consultant to teams looking to make IT investments; ensure systems are designed in accordance with and are aligned to Crane's security policies and standards.
• Influence the continuous improvement of the security program.

Skills

Risk assessment

Threat modeling

Vulnerability management

Cloud security

Azure

CI/CD security

Security monitoring

Education

Bachelor’s Degree in Computer Science/IT/Cybersecurity

Tools

SIEM tools

Vulnerability scanning tools

DLP

PAM

Archer

OneTrust

Job description

Crane Worldwide Logistics is seeking a Sr. Security Risk Analyst to assess, rate, and remediate security risks across cloud and on‑premises environments. You will own risk metrics, lead vulnerability programs, and partner with engineering and IT teams to improve Crane's security posture.

The role emphasizes threat modeling, security frameworks, and compliance, with a focus on Azure/AWS, CI/CD security, and security monitoring tools.