Enterprise Security Partner (Multiple Levels) - Analyst / Senior / Lead

Momentum; San Francisco (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

Leadout Capital is seeking Security Partner professionals at multiple levels to work directly with enterprise leadership. You will manage risk, perform security design reviews, and help reduce exposure across business units.

Ideal candidates bring 3+ years in cybersecurity or IT risk, familiarity with COSO/NIST, and the ability to argue risk-based positions to senior leaders while coordinating with remote stakeholders.

Qualifications

• 3+ years of cybersecurity or IT risk experience in a large enterprise or consultancy.
• Strong understanding of COSO, NIST CSF, and NIST SP 800-53 risk frameworks.
• Ability to translate security risk into business decisions with clear rationale.

Responsibilities

• Maintain and prioritize BU risk register and determine top risks with executive call rights.
• Lead security design reviews and threat modeling with BU architecture teams.
• Provide BU with security expertise and represent their voice in security forums.
• Drive risk remediation plans and ensure accountability for closure.

Skills

Cybersecurity risk management

Security architecture review

Stakeholder communication

Risk prioritization

Education

CISSP

CISA

CISM

Tools

Claude Code

Cursor

AI tooling

Job description

Location: New York City, Bellevue, San Francisco, McLean, Indianapolis, Dallas

The Experience

Our Enterprise Security organization is looking for Security Partner professionals spanning multiple levels to work directly with leadership within enterprise Business Units (BU). BISOs/security partners are accountable for driving measurable security improvements over time and for the health of the relationship between enterprise BU and Security.

We're hiring across the Security Partner career path: from Senior Analysts building foundational operational and analytical skills, through Leads and Senior Leads developing independent technical judgment.

What You'll Actually Be Doing

• Maintain a current, prioritized risk register for your BU, weighing compensating controls and confidently distinguishing top risks from lower priorities, with final risk-call authority at senior grade levels
• Engage deeply with your BU's architecture and lead security design reviews and threat models, advocating well-reasoned security positions, with greater independence at senior grade levels. Achieve this using AI tooling (e.g., Claude Code, Cursor, or similar) to accelerate analysis while applying sound judgment on when outputs need further human review.
• Provide your BU with the right security expertise and represent the BU's voice in security forums, with growing ownership at senior levels.
• Drive risk remediation plans and bug closure to completion — sequencing the highest-impact work first and establishing clear ownership and accountability

You're Our Person If...

• You have 3+ years experience in cybersecurity, IT risk, or a closely related discipline within a large, complex enterprise or consulting environment (years of experience commensurate with the level you’re applying for)
• You have a strong understanding of security control methodologies and frameworks (e.g., COSO, NIST CSF, NIST SP 800-53) and know how to translate them into business-relevant risk
• You bring a sharp, defensible technical point of view, backing your positions with specifics rather than generalities, and prioritize risk with clarity and conviction
• You communicate clearly in writing and verbally, skilled at building trust with cross‑functional and remote stakeholders, and are comfortable operating under ambiguity and tight deadlines

Even Better If...

• You hold a CISSP, CISA, CISM, or equivalent certification
• You have hands‑on fluency with AI/ML security considerations, agentic architectures, or cloud identity systems
• You have prior experience integrating acquired entities, or working in a regulated industry (e.g., financial services, public sector, healthcare)
• You've held or worked closely with a BISO‑type role and are comfortable holding a technical point of view in front of senior technical and business leaders