Remote Information Security Risk & Governance Advisor

Apex Systems; Cedar Rapids (IA); Remote; USD 85,000 - 92,000; Full time

Job summary

Everforth Apex is seeking a Senior Information Security Governance & Risk Analyst to lead risk assessments, security control reviews, and remediation planning across enterprise environments. The role partners with business and technology stakeholders to identify and manage information security risks and to promote secure-by-design principles.

You will support vulnerability management, governance forums, and executive risk reporting while guiding security strategy and compliance initiatives

Qualifications

• 5+ years of experience in Information Security, Cybersecurity, Risk Management, or Governance.
• Experience conducting security risk assessments and security control reviews.
• Experience supporting vulnerability management programs and remediation activities.
• Knowledge of security frameworks and standards such as: NIST, ISO 27001, CIS Controls.
• Understanding of cloud, infrastructure, networking, and enterprise application security concepts.
• Experience managing security exceptions, risk acceptances, and remediation plans.
• Strong communication and stakeholder management skills.
• Ability to explain complex security concepts to technical and non-technical audiences.
• Strong analytical, problem-solving, and organizational skills.

Responsibilities

• Partner with business and technology stakeholders to identify, assess, and manage information security risks.
• Conduct security reviews, risk assessments, and control evaluations for projects, applications, infrastructure, and cloud environments.
• Review and manage security exceptions, risk acceptances, compensating controls, and remediation plans.
• Support vulnerability management initiatives by tracking remediation efforts and ensuring timely risk reduction.
• Collaborate with infrastructure, cloud, application, and engineering teams to address security findings and control gaps.
• Provide security guidance on solution designs, technology changes, and emerging technologies.
• Participate in governance, architecture, and change management forums as a security representative.
• Develop security metrics, risk reporting, and executive-level updates.
• Support audit, compliance, and continuous improvement initiatives.
• Promote security best practices and secure-by-design principles throughout the organization.

Skills

Security risk assessments

Risk management

Security governance

Vulnerability management

Cloud security

Stakeholder communication

Security controls reviews

Education

Bachelor's degree in Cybersecurity or related field

Industry certifications (CISSP, CISM, CRISC, etc.)

Tools

Microsoft Azure security controls

Microsoft 365 security controls

Job description

Everforth Apex is seeking a Senior Information Security Governance & Risk Analyst to lead risk assessments, security control reviews, and remediation planning across enterprise environments. The role partners with business and technology stakeholders to identify and manage information security risks and to promote secure-by-design principles.

You will support vulnerability management, governance forums, and executive risk reporting while guiding security strategy and compliance initiatives