Senior Information Security Strategist — Risk & Governance

Kforce Inc; Woburn (MA); On-site; USD 120,000 - 180,000; Full time

Job summary

Kforce Inc. in Woburn, MA, seeks a Senior Information Security Analyst to bolster a regulated cybersecurity program. You will lead enterprise risk assessments, evaluate controls, and advise on governance across IT, Legal, and Compliance teams.

Ideal candidates have 6–9 years in information security, hands-on Purview/Defender experience, and familiarity with NIST CSF, PCI DSS, and ISO 27001. This role offers growth within a mature GRC environment.

Qualifications

• 6–9 years of experience in information security or IT risk management.
• Hands-on with Microsoft Purview and Defender.
• Knowledge of NIST CSF, FFIEC, PCI DSS, ISO 27001, COBIT.

Responsibilities

• Lead and execute enterprise-wide risk assessments across applications, infrastructure, cloud services, and business processes.
• Evaluate and challenge the effectiveness of security controls and recommend risk-based improvements.
• Serve as a subject matter expert on cybersecurity frameworks, standards, and regulatory requirements.
• Conduct security and architecture reviews for new applications, technologies, and third-party solutions.
• Support the adoption, optimization, and governance of Microsoft Purview and Microsoft Defender capabilities.
• Analyze security events, threat intelligence, and risk indicators to identify emerging security concerns.
• Assist with incident response, vulnerability management, and remediation tracking activities.
• Support the development and enhancement of security policies, standards, procedures, and governance processes.
• Collaborate with IT, Legal, Compliance, Audit, and business teams to assess and manage cybersecurity risk.
• Contribute to ongoing improvements within Governance, Risk, and Compliance (GRC) programs and supporting platforms.
• Research emerging threats, technologies, and industry trends to proactively identify and address security gaps.

Skills

Risk assessment

Security governance

Stakeholder influence

Threat intelligence

Education

CISSP / CISM / CRISC / CISA preferred

Tools

SIEM

GRC tools (Archer, ServiceNow IRM, RiskConnect)

Job description

Kforce Inc. in Woburn, MA, seeks a Senior Information Security Analyst to bolster a regulated cybersecurity program. You will lead enterprise risk assessments, evaluate controls, and advise on governance across IT, Legal, and Compliance teams.

Ideal candidates have 6–9 years in information security, hands-on Purview/Defender experience, and familiarity with NIST CSF, PCI DSS, and ISO 27001. This role offers growth within a mature GRC environment.