Enterprise Security Senior Analyst, Security Partner

Leadout Capital; San Francisco (CA); On-site; USD 110,000 - 160,000; Full time

Job summary

Leadout Capital is seeking a Senior Analyst to support BISOs in day-to-day activities, focusing on risk tracking, governance, and actionable reporting. You will help keep engagements healthy by maintaining risk registers, coordinating deliverables, and producing stakeholder materials under BISO guidance.

The role emphasizes strengthening internal controls, documenting processes, and ensuring clear visibility of risks and mitigations across business units within Enterprise Security.

Qualifications

• 3+ years of experience in consulting or a large corporate environment with a complex IT environment.
• Strong understanding of security internal control methodologies and terminology (e.g., COSO, Cybersecurity Framework (CSF)).
• Ability to identify and articulate key security risks and develop controls to mitigate them.
• Experience implementing and testing security controls based on the NIST SP 800-53 standard.

Responsibilities

• Maintain an accurate, prioritized risk register for assigned business units, including intake of new findings and status updates.
• Track risk buy-down commitments — owners, dates, status — and flag slippage to the responsible BISO.
• Prepare recurring stakeholder materials (status decks, dashboards, executive read-outs) under BISO direction.
• Coordinate meetings between BISOs, business unit customers, and specialist teams; capture actions and drive follow-up.

Skills

Risk management

Stakeholder coordination

Security controls

Security frameworks

Data reporting

Tools

Tableau

Visio

Job description

The Experience

Enterprise Security is looking for a Senior Analyst to support our Business Information Security Officers (BISOs) in their day-to-day work with Enterprise business unit customers. BISOs drive measurable security improvements and own the health of the relationship between their business units and Enterprise Security. As a Senior Analyst, you work alongside BISOs to keep those engagements running smoothly — tracking risks and commitments, coordinating deliverables, and preparing materials for stakeholder reviews.

This role suits someone building on a solid cybersecurity foundation while working alongside experienced security professionals. You won't make independent architectural or risk-acceptance calls — those sit with the BISOs you support. You will make their work visible, actionable, and well-documented, and own the operational rhythm that keeps the team credible with its business unit customers.

What You'll Actually Be Doing

• Maintain an accurate, prioritized risk register for assigned business units, including intake of new findings and status updates
• Track risk buy-down commitments — owners, dates, status — and flag slippage to the responsible BISO
• Prepare recurring stakeholder materials (status decks, dashboards, executive read-outs) under BISO direction
• Coordinate meetings between BISOs, business unit customers, and specialist teams; capture actions and drive follow-up

You're Our Person If...

• You have 3+ years of experience in consulting or a large corporate environment with a complex IT environment
• You have strong understanding of security internal control methodologies and terminology (e.g., COSO, Cybersecurity Framework (CSF))
• You can identify and articulate key security risks and develop controls to mitigate them
• You have experience implementing and testing security controls based on the NIST SP 800-53 standard

Even Better If...

• You've designed and implemented internal controls in response to identified risks
• You're experienced with data and reporting tools such as Tableau or Visio
• You hold a CISSP, CISA, PMP, or CISM certification

*LI-Y