Senior Cyber Risk & Compliance Leader

Financial Industry Regulatory Authority, Inc.; North Dakota; Hybrid; USD 120,000 - 210,000; Full time

Benefits offered by this job

Health insurance

401(k) with company match

Paid time off

Job summary

Financial Industry Regulatory Authority, Inc. is seeking a Senior Security Analyst to support IT Risk Management, Governance & Compliance across enterprise cybersecurity initiatives. The role balances strategic risk with tactical compliance execution.

Expect responsibilities in SSP development, risk registers, audits coordination, vulnerability management, and regulatory alignment with NIST/SOC/PCI frameworks. Hybrid work arrangement with competitive benefits.

Qualifications

• Bachelor's degree or equivalent in a technical field with focus on security.
• Minimum 7 years designing, operating, and monitoring IT systems with cybersecurity emphasis.
• Experience with RMF across full system lifecycle and risk registers in an enterprise.

Responsibilities

• Create and maintain cyber governance artifacts including SSPs and security baselines.
• Manage enterprise risk registers and provide risk reports to leadership.
• Coordinate internal and external audits and streamline documentation from source systems.
• Oversee vulnerability management lifecycle, triage findings, and track remediation to closure.
• Ensure compliance with NIST, SOC, and PCI frameworks.

Skills

NIST RMF

GRC tooling

Vulnerability management

Audit coordination

Risk assessment

Policy development

Education

Bachelor's degree in Computer Science/Engineering/Cybersecurity or related field

Tools

AWS

GRC platform

SSP development tools

Job description

Financial Industry Regulatory Authority, Inc. is seeking a Senior Security Analyst to support IT Risk Management, Governance & Compliance across enterprise cybersecurity initiatives. The role balances strategic risk with tactical compliance execution.

Expect responsibilities in SSP development, risk registers, audits coordination, vulnerability management, and regulatory alignment with NIST/SOC/PCI frameworks. Hybrid work arrangement with competitive benefits.