Information Security Risk Analyst

Compunnel Inc.; San Francisco (CA); On-site; USD 120,000 - 150,000; Full time

Job summary

Compunnel Inc. in San Francisco is seeking an experienced Information Security Risk Analyst to identify, assess, and communicate security risks across business processes and technologies.

You will translate risk findings for executives and partners, support risk strategies, and ensure compliance with security policies while collaborating across teams on cloud and on-prem environments. The role requires strong communication, analytical skills, and the ability to manage multiple initiatives in a

Qualifications

• Experience in risk assessment and security policy application.
• Ability to communicate risk to both technical and non-technical audiences.
• Experience with cloud security practices.

Responsibilities

• Identify risks in processes and technologies and lead improvement initiatives.
• Apply security policies within the organization and contribute insights to policy discussions.
• Advise partners on security controls, policies, and procedures to enable secure operations.
• Build and maintain long-term relationships with business partners to understand technical and business requirements.
• Assess application development teams on secure cloud development and operations to mature practices.
• Evaluate technical implementation details to assess security risks in cloud and on-prem environments.
• Perform security analysis and advise on risk mitigation strategies.
• Assess external service providers to identify risks and shared security responsibilities.
• Conduct security control assessments and prepare detailed reports with findings and recommendations.
• Communicate security risks and implications to executives and stakeholders.
• Collaborate across teams to influence decisions and manage multiple projects in a fast-paced environment.

Skills

Risk assessment

Cloud security

Stakeholder management

Communication

Analytical thinking

Organizational skills

Job description

We are seeking an experienced Information Security Risk Analyst to identify, assess, and communicate security risks across business processes and technologies.

The ideal candidate will combine technical expertise with strong communication and organizational skills to support risk strategies, advise partners, and ensure compliance with security policies.

Key Responsibilities

• Support risk strategies by identifying risks in processes and technologies and leading improvement initiatives.
• Apply security policies within the organization and contribute insights to policy discussions.
• Advise partners on security controls, policies, and procedures to enable secure operations.
• Build and maintain long-term relationships with business partners to understand technical and business requirements.
• Assess application development teams on secure cloud development and operations to mature practices.
• Evaluate technical implementation details to assess security risks in cloud and on-prem environments and recommend improvements.
• Perform complex security analysis and advise on risk mitigation strategies.
• Assess external service providers to identify risks and shared security responsibilities.
• Conduct security control assessments and prepare detailed reports with findings and recommendations.
• Communicate security risks and implications to stakeholders at all levels, including executives.
• Collaborate across teams to influence decisions, manage ambiguity, and lead multiple projects in a fast-paced environment.

Required Qualifications

• Strong ability to communicate and convey risk to technical and non-technical audiences.
• Experience in risk assessment, security policy application, and cloud security practices.
• Ability to partner effectively with stakeholders at various organizational levels.
• Proven analytical and problem-solving skills in cybersecurity contexts.
• Excellent organizational and interpersonal skills.