Security Risk Analyst, Digital Assets & Cloud Controls

Fisher Investments; Camas (WA); Sur place; USD 80 000 - 130 000; Plein temps

Avantages offerts par ce poste

100% paid medical, dental and vision

50% 401(k) match

20 days PTO + holidays

Family support programs

Hybrid work option

Résumé du poste

Fisher Investments is seeking an Information Security Risk Analyst to join our Technology and Enterprise Risk Management teams. You will work on technology risk analysis and recommend controls for Digital Assets, reporting to the VP of Information Security.

You'll translate complex risk findings into business language, collaborate with security, technology, and data privacy experts, and support risk assessments across cloud, on‑premises, and vendor ecosystems.

Qualifications

• Bachelor's degree or equivalent in CS/InfoSec or related field.
• 3+ years of Enterprise Risk Management for Digital Assets.
• 1+ years of Digital Asset audit review (SOC 2 Type II, SOX, PCI).
• Knowledge of NIST 800-53, CIS benchmarks, OWASP, ISO-27001, ITIL, COSO.
• Experience in cloud-based enterprise risk and controls.

Responsabilités

• Represent Information Security in Enterprise Risk Management technology reviews for Digital Assets.
• Collaborate with Information Security, Technology, and Data Privacy SMEs to assess risk control efficacy.
• Research new risk controls for Digital Assets.
• Perform risk and gap assessments across Cloud, IT infrastructure, Applications and Vendors.
• Document risk levels and controls using both quantitative and qualitative methods.
• Translate technical risk information into business language for stakeholders.

Connaissances

Information security risk

Enterprise risk management

GRC platforms

Cloud risk assessment

Vendors & third parties

Scrum/Agile

Security controls

Formation

Bachelor's degree in CS / InfoSec or related

Outils

Okta

EntraID

Splunk

Netskope

GRC platforms

Description du poste

Fisher Investments is seeking an Information Security Risk Analyst to join our Technology and Enterprise Risk Management teams. You will work on technology risk analysis and recommend controls for Digital Assets, reporting to the VP of Information Security.

You'll translate complex risk findings into business language, collaborate with security, technology, and data privacy experts, and support risk assessments across cloud, on‑premises, and vendor ecosystems.