Senior Cyber Risk & Vulnerability Specialist

Focus Partners Wealth; Missouri; Hybrid; USD 100,000 - 130,000; Full time

Benefits offered by this job

Annual bonus

Comprehensive benefits package

Job summary

Focus Partners Wealth is seeking a Senior Risk Operations Specialist to support our Cybersecurity program across vulnerability and third‑party risk management. The role collaborates with Risk, Legal, Compliance, Procurement, and business stakeholders to identify, assess, and mitigate cyber risk.

Responsibilities include managing vulnerability lifecycles, vendor security due diligence, policy development, and KPI reporting. The position may be based in New York or St.

Qualifications

• 3–5 years of cybersecurity risk management experience.
• Experience analyzing vulnerabilities and managing remediation with technical and business stakeholders.
• Familiarity with frameworks such as NIST CSF or ISO 27001.

Responsibilities

• Analyze vulnerability assessments and third‑party security reviews across environmental and business risk factors.
• Partner with IT, risk, legal, compliance, procurement, and business stakeholders to mitigate cybersecurity risk.
• Manage vulnerability and third‑party risk lifecycles, track findings, drive remediation, and verify resolution.
• Develop and maintain third‑party risk management policies, governance processes, and supplier questionnaires.
• Track and report KRIs/KPIs to leadership and support audit/compliance initiatives.
• Support threat intelligence and exposure management to identify emerging risks.

Skills

Cybersecurity risk management

Vulnerability management

Third‑party risk management

Vendor security assessments

Regulatory alignment

Education

Bachelor's degree in cybersecurity or related field

Tools

NIST CSF

ISO 27001

Vulnerability platforms (Rapid7/Tenable/Qualys)

CrowdStrike

Job description

Focus Partners Wealth is seeking a Senior Risk Operations Specialist to support our Cybersecurity program across vulnerability and third‑party risk management. The role collaborates with Risk, Legal, Compliance, Procurement, and business stakeholders to identify, assess, and mitigate cyber risk.

Responsibilities include managing vulnerability lifecycles, vendor security due diligence, policy development, and KPI reporting. The position may be based in New York or St.