Senior Cyber Governance & Risk Lead

Financial Industry Regulatory Authority, Inc.; McLean (VA); Híbrido; USD 112.000 - 203.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health, dental, vision insurance

401(k) with company match

Tuition reimbursement

Paid time off and holidays

Descripción de la vacante

FINRA is seeking a Senior Security Analyst to support IT Risk Management, Governance & Compliance initiatives across the enterprise. The role balances strategic risk with rigorous compliance, developing and maintaining policies, SSPs, and risk registers while guiding remediation roadmaps.

Responsibilities include coordinating audits, facilitating ATO activities, conducting risk assessments (NIST RMF), and leading vulnerability management end-to-end.

Formación

• Bachelor’s degree or equivalent in a technical field and 7+ years in IT security.
• 7+ years designing, operating, and monitoring IT systems with cybersecurity focus.
• 3+ years designing and assessing AWS security controls.
• Experience applying NIST RMF across the full system lifecycle.
• Experience building and maintaining an enterprise cyber risk register in a GRC.
• Ability to coordinate audits and support ATO processes.

Responsabilidades

• Support IT risk management, governance, and compliance across the enterprise.
• Develop and maintain SSPs, policies, procedures, and security documentation.
• Lead vulnerability management and remediation tracking to closure.
• Coordinate internal/external audits and regulatory examinations.
• Develop risk treatment plans and remediation roadmaps with technical teams.
• Support continuous monitoring and ATO activities; report to leadership.

Conocimientos

Cyber risk management

GRC tools

NIST RMF

Vulnerability management

Audit support

Policy documentation

Educación

Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, or related field

Herramientas

AWS

GRC platform

Descripción del empleo

FINRA is seeking a Senior Security Analyst to support IT Risk Management, Governance & Compliance initiatives across the enterprise. The role balances strategic risk with rigorous compliance, developing and maintaining policies, SSPs, and risk registers while guiding remediation roadmaps.

Responsibilities include coordinating audits, facilitating ATO activities, conducting risk assessments (NIST RMF), and leading vulnerability management end-to-end.