Senior Cyber Risk Analyst - Hybrid (Tue-Thu in Office)

Vantor Holdings, Inc.; Westminster (CO); Ibrido; USD 105.000 - 154.000; Tempo pieno

Vantaggi offerti da questo lavoro

401(k) with company match

Mental health resources

Adoption reimbursement

Pet insurance

Descrizione del lavoro

Vantor is seeking a Senior Cyber Risk Analyst to join our Westminster, CO team. The ideal candidate will lead enterprise cyber risk programs, perform risk assessments, and manage audits across regulatory frameworks.

This role requires in-office presence three days a week (Tue–Thu) with remote work on Mon and Fri, and a strong ability to communicate risk to both technical and executive audiences. The position emphasizes governance, stakeholder engagement, and continuous improvement of security

Competenze

• Must be a U.S. citizen and reside near Westminster, CO.
• 3+ years of relevant experience in cyber risk/ security.
• CISA, CISM, CRISC or equivalent certification preferred.

Mansioni

• Lead enterprise cyber security risk program aligned to standards.
• Run risk assessments, software scans, and third-party reviews.
• Manage governance, change management, and stakeholder engagement.
• Report on risk posture with trend analysis and remediation guidance.
• Oversee audits for multiple regulatory frameworks.
• Provide daily status briefs with cause, impact, and prevention.

Conoscenze

Cyber risk assessment

Audit management

Regulatory frameworks

ISO 27001 knowledge

NIST 800-53 knowledge

NIST 800-171 knowledge

Information security

Communication skills

Formazione

Bachelor's degree in IT/IS

Descrizione del lavoro

Vantor is seeking a Senior Cyber Risk Analyst to join our Westminster, CO team. The ideal candidate will lead enterprise cyber risk programs, perform risk assessments, and manage audits across regulatory frameworks.

This role requires in-office presence three days a week (Tue–Thu) with remote work on Mon and Fri, and a strong ability to communicate risk to both technical and executive audiences. The position emphasizes governance, stakeholder engagement, and continuous improvement of security