Engineer III – Cybersecurity Risk Analyst

Jobtailor; Rancho Cucamonga (CA); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Job summary

Jobtailor in Rancho Cucamonga, CA seeks an experienced cybersecurity leader to own the system-wide governance, risk management, and compliance program. You will define policies, oversee incident investigations, and align controls with regulatory requirements.

The role requires building metrics, guiding threat management, and coordinating data collection for industry frameworks. You will drive program maturity, advise on disaster recovery, and ensure protection of digital assets across the

Qualifications

• Five years in cybersecurity with focus on governance, compliance and risk management.
• Bachelor’s degree in Information Systems Security or related field required.
• CISSP or similar certifications preferred.
• Knowledge of laws, regulations, and ethics related to cybersecurity and privacy.
• Ability to apply cybersecurity and privacy principles to business and technical requirements (confidentiality, integrity, availability, authentication, non-repudiation).

Responsibilities

• Lead the system-wide cybersecurity compliance program aligning IT activities with regulatory requirements.
• Develop and implement policies to safeguard digital assets and prevent unauthorized access.
• Recommend improvements in program maturity, incident investigation, threat management, and control assessment.
• Organize data collection from security artifacts and map to industry frameworks and control portfolios.
• Build and maintain cybersecurity metrics for management and executives.
• Analyze risk across technology stack and supply chain; collaborate with leaders on exceptions.
• Develop strategies to improve cyber hygiene and drive awareness and training.
• Review security in products/solutions and develop remediation plans.

Skills

Cybersecurity

Governance

Risk Management

Compliance Standards

CISSP

Data Protection

Incident Investigation

Threat Management

Program Strategy

Education

Bachelor’s degree in Information Systems Security or related field

Job description

• Lead the system-wide cybersecurity compliance program, ensuring IT activities, processes, and procedures meet regulatory and industrial requirements.
• Develop and implement effective policies and practices to safeguard IEHP digital assets and prevent unauthorized access.
• Recommend process improvement and technical directions in matters relating to program maturity, incident investigation, threat management, and control assessment.
• Organize the collection of data from required security artifacts and questionnaires for industry framework and other related industrial and cybersecurity standards and mapping this to the company control portfolio.
• Build and maintain cybersecurity metrics for all levels of management focused on trending and tracking reports to demonstrate compliance and improve resilience.
• Analyze risk associated with technology stack and supply chain and work with business leaders to proactively manage exceptions.
• Develop program strategies to improve cyber hygiene and address awareness and training for all stakeholders.
• Perform security review in technology products and solutions (including security tools and systems), identify gaps in control design and operation, and develop remediation plan.
• Provide advice and input for IT disaster recovery, contingency, and continuity of operations plans.
• Define policy and standards for data protection and recovery.
• Perform access & privilege review for both machine and human accounts.
• Properly document all systems security implementation, operations, and maintenance activities and update as necessary.
• Provide input to risk management process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).

Requirements

• Five (5) years in cybersecurity with focus on governance, compliance and risk management
• Bachelor’s degree in Information Systems Security or in a computer related field or similar technical field from an accredited institution required
• Certified Information Systems Security Professional (CISSP) or other industrial and vendor security certifications preferred
• Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy
• Skilled in Cybersecurity, privacy principles and organizational requirements
• Ability to apply cybersecurity and privacy principles to IEHP business and technical requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)

Core Competencies

Demonstrates expertise in leading cybersecurity compliance programs, developing policies for data protection, and managing risk associated with technology and supply chains. Proficient in analyzing cybersecurity metrics and implementing strategies to enhance cyber hygiene and stakeholder awareness.

Highest-signal resume keywords

• Cybersecurity Governance
• Risk Management
• Compliance Standards
• Certified Information Systems Security Professional (CISSP)
• Data Protection Policies

Hard Skills

• Cybersecurity
• Incident Investigation
• Threat Management
• Control Assessment
• Data Collection
• Security Review
• Access & Privilege Review
• Risk Analysis
• Program Strategy Development
• Documentation of Security Implementation

Soft Skills

• Process Improvement
• Communication
• Collaboration
• Advisory Skills
• Training and Awareness

Certifications & Qualifications

• Certified Information Systems Security Professional (CISSP)

Industry Keywords

• Cybersecurity Compliance
• Regulatory Requirements
• Privacy Principles
• Operational Procedures
• IT Disaster Recovery