Senior information Security Risk Analyst

enexusglobal; California; Remote; USD 90,000 - 140,000; Full time

Job summary

An established industry player is seeking a Senior Information Security Risk Analyst to bolster its cybersecurity standards. In this pivotal role, you will engage with cross-functional teams to assess risks, document decisions, and ensure compliance with established frameworks. Your expertise will guide the review and update processes, contributing to the overall security posture of the organization. If you thrive in a structured environment and have a passion for risk management, this is an exciting opportunity to make a significant impact in the cybersecurity landscape.

Qualifications

• 12+ years of experience in information risk management and IT compliance.
• Strong understanding of IT infrastructure and risk impact assessment methodologies.

Responsibilities

• Facilitate the review of cybersecurity standards and conduct business impact assessments.
• Draft and maintain documentation for cybersecurity operational standards.

Skills

Information Risk Management

Standards Governance

IT Compliance

Business Impact Assessments

Stakeholder Engagement

Technical Writing

NIST CSF

ISO 27001

Education

Bachelor's Degree in Information Security or related field

PMP, CISSP, CRISC certification

Tools

SharePoint

GRC Platforms

Job description

Role - Senior information Security Risk Analyst

location - Remote

Contract type - W2 / C2C

Exp - 12+ years

Role Summary

We are seeking a Senior Information Security Risk Analyst to support the review, update, and risk assessment of enterprise cybersecurity standards. This role will be central to facilitating cross-functional stakeholder engagement, evaluating technical and operational impact, documenting risk decisions, and guiding standards through the established change management process.

Key Responsibilities

• Facilitate the review of the lifecycle of cybersecurity standards.
• Conduct and document business impact assessments (BIA) for proposed updates to the cybersecurity standards, focusing on operational, compliance, and support implications.
• Partner with SMEs in Cybersecurity, IT, Compliance, and Audit to validate revisions.
• Coordinate and document working sessions, gathering stakeholder feedback and aligning final decisions.
• Draft, edit, and version-control cybersecurity operational and technical standards documentation.
• Maintain clear and audit-ready documentation of change rationale, versioning, and governance approvals.
• Support communication and training coordination planning for standards with operational impact
• Track and report status across multiple concurrent standards updates
• Ensure all work aligns with Cybersecurity Standards Management Platform processes and NIST CSF-aligned control frameworks.

Required Skills & Experience

• 7+ years in information risk management, standards governance, or IT compliance roles
• Strong understanding of IT infrastructure, enterprise operations, and risk impact assessment methodologies
• Experience conducting or supporting business impact assessments (BIA) (technical and business)
• Proficient in project facilitation, stakeholder engagement, and governance coordination
• Excellent technical writing skills for standards, procedures, and governance risk documentation
• Working familiarity with frameworks such as NIST CSF, NIST 800-53, ISO 27001, or CIS Controls
• Experience using tools like SharePoint or GRC platforms
• PMP, CISSP, CRISC, or similar certification is a plus

Ideal Candidate Profile

• Able to translate standards changes into operational and risk-oriented impacts
• Comfortable working independently while coordinating across multi-disciplinary teams
• Strong attention to detail and strong organizational skills and commitment to documentation quality and follow through.
• Thrives in a structured, process and governance-driven environment.

Create a job alert for this search

Senior Information Security Analyst • CA, United States