Senior Cybersecurity Solution Analyst

Spectraforce Technologies; Oakland (CA); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Spectraforce Technologies is seeking a Senior Cybersecurity Solution Analyst in Oakland, CA. This hybrid role focuses on strategic risk assessments and strengthening the resilience of critical supply chains against evolving cyber threats.

You will lead assessments for suppliers and third-party partners, document risks, and drive remediation with stakeholders. The role emphasizes developing metrics, reporting, and embedding cybersecurity requirements into supplier onboarding and contracts.

Qualifications

• Bachelor’s degree in cybersecurity or related field, or equivalent experience.
• Experience in information technology security and risk assessment.
• Relevant certifications such as CISSP, CISM, CRISC or CCSK are a plus.

Responsibilities

• Lead strategic cybersecurity risk assessments for suppliers and third-party partners.
• Document and monitor risks with business units and external partners.
• Develop metrics and reporting for leadership and operations.
• Validate controls by reviewing evidence and test results.

Skills

Analytical thinking

Stakeholder engagement

Communication skills

Risk assessment

AI in cybersecurity

Education

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field

Master's degree in CS, Cybersecurity, Information Systems, or related field

Tools

Security assessment tools

Job description

Senior Cybersecurity Solution Analyst

Oakland, CA (Hybrid, working from your remote office and Oakland, CA approximately once per week, or more, based on business needs.)
4 months

Position Summary

Join a collaborative Cybersecurity team focused on protecting critical infrastructure and strengthening the resilience of complex supply chains against evolving cyber threats.

The Senior Cybersecurity Solution Analyst - Strategic Supply Chain Risk Management evaluates, verifies, and improves the security and resilience of suppliers, vendors, and third-party partners. This role leads risk assessments, control reviews, remediation tracking, and ongoing monitoring to ensure alignment with organizational standards, regulatory requirements, and industry best practices.

Job Responsibilities

• Lead strategic cybersecurity risk assessments, audits, and verification activities for suppliers and third-party partners.
• Assess supply chain risk and partner with business units and third parties to document, mitigate, and monitor risks.
• Develop and maintain metrics, documentation, and reporting for leadership and operational teams.
• Validate security controls by reviewing evidence, interpreting test results, and informing risk decisions.
• Refine control test procedures, analytical tools, and testing methods for supply chain environments.
• Partner with procurement, legal, and compliance teams to embed cybersecurity requirements into supplier onboarding and contracts.
• Update supply chain security controls as business needs, risks, and threats evolve.
• Monitor emerging supply chain threats, vulnerabilities, and cybersecurity best practices.
• Enhance detection capabilities and test coordinated response processes for supply chain cybersecurity incidents.
• Engage business owners and operational stakeholders to address control gaps and strengthen security posture.
• Perform other duties as needed to support the supply chain risk management program.
• Use AI-enabled tools to support risk assessments, evidence review, reporting, and prioritization.

Qualifications

Minimum:

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field, or equivalent experience.
• Utility industry experience.
• Three years of information technology experience.
• Information technology security certification.

Desired

• Master's degree in Computer Science, Cybersecurity, Information Systems, or related field.
• Five or more years of experience in IT security, risk management, or supply chain cybersecurity.
• Strong knowledge of cybersecurity frameworks and standards, including NIST and ISO.
• Strong analytical, communication, and stakeholder engagement skills.
• Relevant certifications such as CISSP, CISM, CRISC, or CCSK.
• Ability to travel up to 10%.
• Experience in utility, critical infrastructure, or large enterprise supply chain environments.
• Technical documentation and project management skills.
• Ability to lead cross-functional initiatives to completion.
• Broad experience across IT, security, and privacy domains.
• Ability to provide technical leadership and subject matter expertise.

Nice to Have: AI Experience

• Experience applying AI, automation, or analytics tools to cybersecurity, risk management, or supplier assessments.
• Familiarity with AI governance, responsible AI, data protection, and emerging AI security risks.
• Ability to evaluate AI-enabled vendor capabilities and communicate related risks.