Network Security Risk & Compliance Analyst II

Kforce Inc; Newport Beach (CA); On-site; USD 120,000 - 160,000; Full time

Job summary

Kforce Inc. is seeking a Network Security Risk & Compliance Analyst to join its Newport Beach, CA team.

This role acts as the liaison among Network Security, Cyber Risk, ORR, Audit, Vulnerability Management, and Security Operations to advance the maturity, effectiveness, and compliance of the security program. The ideal candidate brings 5+ years in cybersecurity governance, risk management, and control assurance, with hands-on experience in vulnerability remediation, incident response

Qualifications

• 5+ years of experience in Cybersecurity, Risk Management, Governance & Compliance, Security Operations, or Network Security
• Experience supporting audits, risk assessments, control testing, or compliance programs
• Experience working with vulnerability management, penetration testing, incident response, or security assurance programs
• Strong understanding of cybersecurity risk management and control frameworks
• Excellent communication and stakeholder management skills
• Ability to drive remediation efforts across multiple teams and technical disciplines
• Experience with enterprise network security technologies including firewalls, web application firewalls, proxies, remote access, and Zero Trust solutions

Responsibilities

• Act as the Network Security representative for OR&R, Cyber Risk, Audit, and Compliance activities
• Support assessments and ongoing effectiveness reviews of Network Security controls within the Enterprise Control Model
• Coordinate evidence collection, remediation activities, issue tracking, and risk treatment plans
• Identify control gaps and partner with engineering and operations teams to drive corrective actions
• Coordinate remediation activities for vulnerabilities impacting network security platforms and services
• Partner with Vulnerability Management teams to ensure timely mitigation of critical and high-risk findings
• Support internal and external penetration testing activities and drive remediation efforts resulting from assessment findings

Skills

Cybersecurity

Risk Management

Governance & Compliance

Security Operations

Network Security

Tools

Firewalls

Web Application Firewalls

Proxies

Remote Access

Zero Trust

Job description

Responsibilities

A client with Kforce is seeking a Network Security Risk & Compliance Analyst to join their team in Newport Beach, CA. Summary: This position serves as the primary liaison between Network Security, Cyber Risk, Operational Risk & Resilience (OR&R), Audit, Vulnerability Management, and Security Operations teams. This role is responsible for driving the maturity, effectiveness, and compliance of the Network Security program through control assessments, risk management, vulnerability remediation oversight, incident response coordination, and security assurance activities. This is not a traditional SOC analyst or firewall administration role. Success in this position requires experience with cybersecurity governance, control assurance, risk management, vulnerability remediation, incident response coordination, and cross-functional security program leadership. The ideal candidate possesses a blend of cybersecurity governance, risk management, compliance, vulnerability management, incident response, and network security experience, with the ability to influence outcomes across technical and business stakeholders.

• Act as the Network Security representative for OR&R, Cyber Risk, Audit, and Compliance activities
• Support assessments and ongoing effectiveness reviews of Network Security controls within the Enterprise Control Model
• Coordinate evidence collection, remediation activities, issue tracking, and risk treatment plans
• Identify control gaps and partner with engineering and operations teams to drive corrective actions
• Coordinate remediation activities for vulnerabilities impacting network security platforms and services
• Partner with Vulnerability Management teams to ensure timely mitigation of critical and high-risk findings
• Support internal and external penetration testing activities and drive remediation efforts resulting from assessment findings

Requirements

• 5+ years of experience in Cybersecurity, Risk Management, Governance & Compliance, Security Operations, or Network Security
• Experience supporting audits, risk assessments, control testing, or compliance programs
• Experience working with vulnerability management, penetration testing, incident response, or security assurance programs
• Strong understanding of cybersecurity risk management and control frameworks
• Excellent communication and stakeholder management skills
• Ability to drive remediation efforts across multiple teams and technical disciplines
• Experience with enterprise network security technologies including firewalls, web application firewalls, proxies, remote access, and Zero Trust solutions

Preferred Knowledge & Experience

• Preferred Certifications: GSEC, CISSP, CRISC, CISA, CGRC
• NIST Cybersecurity Framework (CSF), CIS Critical Security Controls
• Cybersecurity Governance, Risk & Compliance (GRC)
• Control effectiveness assessment and evidence management
• Vulnerability management and remediation programs
• Incident response and operational resilience

What Success Looks Like

• Serves as the trusted Network Security partner for OR&R, Cyber Risk, Audit, and Vulnerability Management teams
• Drives successful completion of control assessments and remediation activities
• Improves visibility into network security risk, compliance, and control effectiveness
• Advances Network Security program maturity through measurable improvements in governance, resilience, and risk management

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.