Risk Specialist

Focus Partners Wealth; Missouri; Hybrid; USD 100,000 - 130,000; Full time

Benefits offered by this job

Annual bonus

Comprehensive benefits package

Job summary

Focus Partners Wealth is seeking a Senior Risk Operations Specialist to support our Cybersecurity program across vulnerability and third‑party risk management. The role collaborates with Risk, Legal, Compliance, Procurement, and business stakeholders to identify, assess, and mitigate cyber risk.

Responsibilities include managing vulnerability lifecycles, vendor security due diligence, policy development, and KPI reporting. The position may be based in New York or St.

Qualifications

• 3–5 years of cybersecurity risk management experience.
• Experience analyzing vulnerabilities and managing remediation with technical and business stakeholders.
• Familiarity with frameworks such as NIST CSF or ISO 27001.

Responsibilities

• Analyze vulnerability assessments and third‑party security reviews across environmental and business risk factors.
• Partner with IT, risk, legal, compliance, procurement, and business stakeholders to mitigate cybersecurity risk.
• Manage vulnerability and third‑party risk lifecycles, track findings, drive remediation, and verify resolution.
• Develop and maintain third‑party risk management policies, governance processes, and supplier questionnaires.
• Track and report KRIs/KPIs to leadership and support audit/compliance initiatives.
• Support threat intelligence and exposure management to identify emerging risks.

Skills

Cybersecurity risk management

Vulnerability management

Third‑party risk management

Vendor security assessments

Regulatory alignment

Education

Bachelor's degree in cybersecurity or related field

Tools

NIST CSF

ISO 27001

Vulnerability platforms (Rapid7/Tenable/Qualys)

CrowdStrike

Job description

## Risk SpecialistApplylocations: St. Louis, Missouri: New York, New Yorktime type: Full timeposted on: Posted 3 Days Agojob requisition id: JR100037**Job Description Summary:**Focus Financial Partners is seeking a proactive and detail-oriented Senior Risk Operations Specialist to support and strengthen our organization’s Cybersecurity program. This role is responsible for supporting key risk pillars: Vulnerability Management and Risk Management. A successful candidate will have knowledge of one or more of these areas and be able to assist with writing policy and process, supporting deployment of technology and handling incident response in a variety of environments. The candidate will also manage and maintain cybersecurity dashboards to track key performance indicators (KPIs) across all partner firms. This role can be based in New York, NY or St Louis. MO.**Job Description:****Primary Responsibilities*** Analyze vulnerability assessments and third-party security reviews, considering environmental, procedural, and business risk factors—not just technical severity scores.* Partner with Infrastructure, Security Engineering, Enterprise Risk Management, Vendor Management, Legal, Compliance, Procurement, and business stakeholders to identify, assess, and mitigate cybersecurity risk.* Manage the lifecycle of vulnerabilities and third-party risks by tracking findings, driving remediation efforts, facilitating risk acceptance, and validating issue resolution.* Conduct cybersecurity due diligence for new and existing vendors, evaluate security controls, and recommend practical risk mitigation strategies and compensating controls.* Develop and maintain third-party risk management (TPRM) policies, procedures, vendor assessment questionnaires, and governance processes.* Drive remediation initiatives for end-of-life and unsupported technologies, vendor security gaps, and other identified cyber risks.* Assist in developing threat intelligence and exposure management processes to identify emerging risks affecting the organization and its third-party ecosystem.* Develop, track, and report cybersecurity and third-party risk metrics, including Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs), to leadership.* Support regulatory, audit, and compliance initiatives by ensuring cybersecurity and third-party risk practices align with applicable regulations and industry frameworks.* Build strong relationships with internal stakeholders and third-party partners to promote effective risk management and continuous improvement across the cybersecurity program.**Qualifications*** 3–5 years of experience in cybersecurity risk management, vulnerability management, third-party risk management, or a related cybersecurity discipline.* Experience analyzing vulnerabilities, conducting vendor security assessments, and managing remediation efforts across technical and business stakeholders.* Knowledge of the vulnerability management lifecycle, including discovery, validation, prioritization, remediation, verification, exception management, and risk acceptance.* Familiarity with cybersecurity frameworks such as NIST CSF, ISO 27001, or similar industry standards.* Experience with vulnerability and exposure management platforms such as Rapid7, Tenable, Qualys, CrowdStrike, or similar tools.* Knowledge of financial services regulations and security requirements, including SEC, FINRA, Regulation S-P, GDPR, and CCPA.* Strong analytical, communication, and relationship management skills with the ability to influence technical and non-technical stakeholders.* Ability to manage multiple priorities in a fast-paced, highly collaborative environment.* Industry certifications such as CISSP, CISM, or GIAC certifications are preferred.* Prior experience in a financial services or multi-partner environment is preferred.This position is an exempt position. The annualized base pay range for this role is expected to be between $100,000-$130,000base salary compensation range. Actual base pay may vary based on factors including, but not limited to, experience, subject matter expertise, geographic location where work will be performed, and the applicant’s skill set. The base pay is just one component of the total compensation package. Other rewards may include an annual cash bonus and a comprehensive benefits package, including but not limited to medical, dental, vision, life insurance, and 401(k). Please note that the job title is subject to change based on the selected candidate’s experience and education. Focus is a leading financial services firm comprised of integrated wealth management, family office, and business management services. Blending deep expertise and expansive resources with a boutique, client-first fiduciary philosophy, Focus helps individuals, families, and institutions navigate complex financial situations with highly personalized solutions tailored to their unique needs. To learn more about Focus, visit www.focusfinancialpartners.com or follow the company on LinkedIn. **EEO Statement**: Focus is an equal opportunity employer and bases its employment decisions on the employee or candidate’s skillset, and without regard to an employee or candidate’s race, color, religion, sex (including pregnancy), gender identity, sexual orientation, national origin, age, disability, genetic information, veteran status, or any other characteristic protected by local, state and/or federal law. Focus complies with federal and state disability laws and makes reasonable accommodations for applicants and employees with disabilities. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact [e-mail]