Information Security Risk Analyst

Compunnel, Inc.; San Francisco (CA); On-site; USD 90,000 - 120,000; Full time

Job summary

A leading technology consulting firm in San Francisco seeks an experienced Information Security Risk Analyst. This role involves identifying and communicating security risks, supporting risk strategies, and advising partners on security policies. Ideal candidates will have strong communication, analytical skills, and experience in cybersecurity contexts.

Qualifications

• Strong ability to communicate and convey risk to technical and non-technical audiences.
• Experience in risk assessment and security policy application.
• Ability to partner effectively with stakeholders.
• Proven analytical and problem-solving skills in cybersecurity contexts.
• Excellent organizational and interpersonal skills.

Responsibilities

• Support risk strategies by identifying risks and leading improvement initiatives.
• Advise partners on security controls and policies.
• Communicate security risks to stakeholders, including executives.
• Build and maintain long-term relationships with business partners to understand technical and business requirements.
• Assess secure cloud development and operations for mature practices.
• Evaluate security risks in cloud and on-prem environments and recommend improvements.
• Perform complex security analysis and advise on risk mitigation strategies.
• Assess external service providers to identify risks and shared security responsibilities.
• Conduct security control assessments and prepare detailed reports with findings and recommendations.
• Communicate security risks and implications to stakeholders at all levels, including executives.
• Collaborate across teams to influence decisions, manage ambiguity, and lead multiple projects in a fast-paced environment.

Skills

Risk assessment

Cloud security practices

Communication skills

Analytical skills

Problem-solving skills

Organizational skills

Job description

We are seeking an experienced Information Security Risk Analyst to identify, assess, and communicate security risks across business processes and technologies.

The ideal candidate will combine technical expertise with strong communication and organizational skills to support risk strategies, advise partners, and ensure compliance with security policies.

Key Responsibilities

• Support risk strategies by identifying risks in processes and technologies and leading improvement initiatives.
• Apply security policies within the organization and contribute insights to policy discussions.
• Advise partners on security controls, policies, and procedures to enable secure operations.
• Build and maintain long-term relationships with business partners to understand technical and business requirements.
• Assess application development teams on secure cloud development and operations to mature practices.
• Evaluate technical implementation details to assess security risks in cloud and on-prem environments and recommend improvements.
• Perform complex security analysis and advise on risk mitigation strategies.
• Assess external service providers to identify risks and shared security responsibilities.
• Conduct security control assessments and prepare detailed reports with findings and recommendations.
• Communicate security risks and implications to stakeholders at all levels, including executives.
• Collaborate across teams to influence decisions, manage ambiguity, and lead multiple projects in a fast-paced environment.

Required Qualifications

• Strong ability to communicate and convey risk to technical and non-technical audiences.
• Experience in risk assessment, security policy application, and cloud security practices.
• Ability to partner effectively with stakeholders at various organizational levels.
• Proven analytical and problem-solving skills in cybersecurity contexts.
• Excellent organizational and interpersonal skills.