Network Security Risk & Compliance Analyst II

Ledgent Technology; Newport Beach (CA); On-site; USD 83,000 - 91,000; Part time

Job summary

Ledgent Technology is seeking a Network Security Risk & Compliance Analyst II in Newport Beach. The role focuses on governance, risk management, and security assurance across security programs.

The candidate will coordinate control assessments, evidence collection, remediation, and risk‑based decision making with OR&R, Cyber Risk, Audit, and Vulnerability Management teams.

Qualifications

• 5+ years in Cybersecurity, Risk Management, Governance & Compliance, Security Operations, or Network Security.
• Experience supporting audits, risk assessments, control testing, or compliance programs.
• Experience with vulnerability management, incident response, or security assurance programs.
• Strong understanding of cybersecurity risk management and control frameworks.
• Excellent communication and stakeholder management skills.

Responsibilities

• Act as Network Security representative for OR&R, Cyber Risk, Audit, and Compliance activities.
• Coordinate evidence collection, remediation actions, issue tracking, and risk treatment plans.
• Drive remediation across multiple teams to close control gaps and improve posture.
• Coordinate remediation activities for vulnerabilities impacting network security platforms.
• Support testing activities and drive remediation from assessment findings.
• Participate in incident response coordination and post‑incident reviews.
• Develop reporting and metrics on control effectiveness and risk posture.

Skills

Cybersecurity governance

Risk management

Vulnerability management

Incident response

Security controls

Audits & compliance

Stakeholder management

Job description

Network Security Risk & Compliance Analyst II (JN -092026-431438) Newport Beach, California

Salary: USD60 - USD66.9 per hour

Hourly Pay Rate: $60.00 -to- 66.90

Its temp to hire

This role is offered on a W‑2 basis only. Candidates represented by third‑party employers cannot be considered.

Overview

The Network Security Risk & Compliance Analyst serves as the primary liaison between Network Security, Cyber Risk, Operational Risk & Resilience (OR&R), Audit, Vulnerability Management, and Security Operations teams. This role is responsible for driving the maturity, effectiveness, and compliance of the Network Security program through control assessments, risk management, vulnerability remediation oversight, incident response coordination, and security assurance activities. This is not a traditional SOC analyst or firewall administration role. Success in this position requires experience with cybersecurity governance, control assurance, risk management, vulnerability remediation, incident response coordination, and cross-functional security program leadership The ideal candidate possesses a blend of cybersecurity governance, risk management, compliance, vulnerability management, incident response, and network security experience, with the ability to influence outcomes across technical and business stakeholders.

Key Responsibilities

Governance, Risk & Control Assurance

• Act as the Network Security representative for OR&R, Cyber Risk, Audit, and Compliance activities.
• Support assessments and ongoing effectiveness reviews of Network Security controls within the Enterprise Control Model.
• Coordinate evidence collection, remediation activities, issue tracking, and risk treatment plans.
• Identify control gaps and partner with engineering and operations teams to drive corrective actions.

Vulnerability & Security Assessment Management

• Coordinate remediation activities for vulnerabilities impacting network security platforms and services.
• Partner with Vulnerability Management teams to ensure timely mitigation of critical and high-risk findings.
• Support internal and external penetration testing activities and drive remediation efforts resulting from assessment findings.
• Track risk exceptions and remediation commitments through closure.

Incident Response & Operational Resilience

• Participate in network security related incident response and post-incident review activities.
• Coordinate Network Security participation in tabletop exercises, cyber resilience testing, and maturity assessments.
• Identify opportunities to improve operational readiness, security posture, and control effectiveness.

Risk Reporting & Program Maturity

• Participate in quarterly Key Risk Indicator (KRI) reviews and risk governance forums.
• Develop reporting and metrics related to control effectiveness, vulnerabilities, risk posture, and remediation progress.
• Identify and implement automation opportunities across security workflows to improve efficiency and response times
• Support continuous improvement initiatives aligned to NIST Cybersecurity Framework (CSF) and CIS Controls.

Required Qualifications

• 5+ years of experience in Cybersecurity, Risk Management, Governance & Compliance, Security Operations, or Network Security.
• Experience supporting audits, risk assessments, control testing, or compliance programs.
• Experience working with vulnerability management, penetration testing, incident response, or security assurance programs.
• Strong understanding of cybersecurity risk management and control frameworks.
• Excellent communication and stakeholder management skills.
• Ability to drive remediation efforts across multiple teams and technical disciplines.
• Enterprise network security technologies including firewalls, web application firewalls, proxies, remote access, and Zero Trust solutions

Preferred Knowledge & Experience

• NIST Cybersecurity Framework (CSF), CIS Critical Security Controls
• Cybersecurity Governance, Risk & Compliance (GRC)
• Control effectiveness assessment and evidence management
• Vulnerability management and remediation programs
• Incident response and operational resilience

What Success Looks Like

• Serves as the trusted Network Security partner for OR&R, Cyber Risk, Audit, and Vulnerability Management teams.
• Drives successful completion of control assessments and remediation activities.
• Improves visibility into network security risk, compliance, and control effectiveness.
• Advances Network Security program maturity through measurable improvements in governance, resilience, and risk management.