Senior Enterprise Security Analyst: Risk & Stakeholder

Leadout Capital; San Francisco (CA); On-site; USD 110,000 - 160,000; Full time

Job summary

Leadout Capital is seeking a Senior Analyst to support BISOs in day-to-day activities, focusing on risk tracking, governance, and actionable reporting. You will help keep engagements healthy by maintaining risk registers, coordinating deliverables, and producing stakeholder materials under BISO guidance.

The role emphasizes strengthening internal controls, documenting processes, and ensuring clear visibility of risks and mitigations across business units within Enterprise Security.

Qualifications

• 3+ years of experience in consulting or a large corporate environment with a complex IT environment.
• Strong understanding of security internal control methodologies and terminology (e.g., COSO, Cybersecurity Framework (CSF)).
• Ability to identify and articulate key security risks and develop controls to mitigate them.
• Experience implementing and testing security controls based on the NIST SP 800-53 standard.

Responsibilities

• Maintain an accurate, prioritized risk register for assigned business units, including intake of new findings and status updates.
• Track risk buy-down commitments — owners, dates, status — and flag slippage to the responsible BISO.
• Prepare recurring stakeholder materials (status decks, dashboards, executive read-outs) under BISO direction.
• Coordinate meetings between BISOs, business unit customers, and specialist teams; capture actions and drive follow-up.

Skills

Risk management

Stakeholder coordination

Security controls

Security frameworks

Data reporting

Tools

Tableau

Visio

Job description

Leadout Capital is seeking a Senior Analyst to support BISOs in day-to-day activities, focusing on risk tracking, governance, and actionable reporting. You will help keep engagements healthy by maintaining risk registers, coordinating deliverables, and producing stakeholder materials under BISO guidance.

The role emphasizes strengthening internal controls, documenting processes, and ensuring clear visibility of risks and mitigations across business units within Enterprise Security.