Security Risk Analyst

Talener; Boston (MA); Hybrid; USD 100,000 - 155,000; Full time

Benefits offered by this job

Bonus

Equity

Hybrid work

Job summary

Talener in Boston is seeking an Information Security Risk Analyst to join a growing team focused on governance, security, and investor confidence. You will conduct risk assessments for applications, vendors, and internal systems, review controls, and help manage remediation efforts.

Collaborate with IT, Legal, Compliance, HR and business teams on risk initiatives, support SOC 1 controls and audit readiness, and contribute to policy development and governance reporting in a hybrid work

Qualifications

• 3+ years of experience in Information Security, Risk Management, GRC, Audit, Compliance, or a related field.

Responsibilities

• Conduct information security risk assessments for applications, vendors, and internal systems.
• Review security controls, identify risks, and track remediation efforts.
• Support SOC 1 controls, audit readiness, and evidence collection activities.
• Manage security due diligence questionnaires and communicate security controls to investors and stakeholders.
• Partner with IT, Legal, Compliance, HR, and business teams on risk and governance initiatives.
• Assist with vendor risk management, change management reviews, investigations, and eDiscovery activities.
• Contribute to policy development, governance reporting, and continuous improvement of security processes.

Skills

Risk assessment

Communication

Vendor risk management

Job description

Information Security Risk Analyst

Join a leading alternative investment firm that manages billions in assets across private equity, private credit, and strategic investment platforms. The organization partners with middle-market companies to drive growth and long-term value creation, supported by a highly collaborative team spanning investment, legal, compliance, operations, and technology functions. With a strong focus on governance, operational excellence, and cybersecurity, the firm continues to invest in modern security and risk management capabilities that support both business growth and investor confidence.

What You'll Do

• Conduct information security risk assessments for applications, vendors, and internal systems.
• Review security controls, identify risks, and track remediation efforts.
• Support SOC 1 controls, audit readiness, and evidence collection activities.
• Manage security due diligence questionnaires and communicate security controls to investors and stakeholders.
• Partner with IT, Legal, Compliance, HR, and business teams on risk and governance initiatives.
• Assist with vendor risk management, change management reviews, investigations, and eDiscovery activities.
• Contribute to policy development, governance reporting, and continuous improvement of security processes.

What We're Looking For

• 3+ years of experience in Information Security, Risk Management, GRC, Audit, Compliance, or a related field.
• Experience performing risk assessments, control reviews, and audit support.
• Knowledge of frameworks such as NIST CSF, ISO 27001, and SOC controls.
• Strong communication skills with the ability to translate technical risks into business terms.
• Experience with vendor risk management and governance processes.
• Certifications such as Security+, CISA, CRISC, or ISO 27001 are a plus.
• High-visibility role supporting executive leadership and business stakeholders.
• Opportunity to influence and mature a growing security governance and risk program.
• Exposure to enterprise security, third-party risk, audits, compliance, and investor-facing security initiatives.
• Collaborative environment where security is viewed as a strategic business enabler.

Compensation

$100,000 – $155,000 base salary (Based on experience) plus bonus, benefits and equity

Hybrid

Boston, MA

FULL_TIME