Senior InfoSec Engineer - Risk & Cloud Security

Jobtailor; Massachusetts; On-site; USD 110,000 - 150,000; Full time

Job summary

Jobtailor seeks an experienced information security risk professional to assess risks, controls, and processes across technology environments, including cloud and third‑party relationships. You will evaluate security designs, communicate risks to stakeholders, and help strengthen governance, policy, and risk reporting while staying current with AI security and regulatory developments.

The role emphasizes collaboration with technology, compliance, audit, and business teams to shift security left

Qualifications

• Bachelor's degree or 4 additional years of relevant experience in lieu of degree
• 4–6 years of relevant experience
• Knowledge of information security frameworks and standards such as NIST CSF, NIST 800-53, ISO 27001, CIS Controls, or FFIEC guidance
• Familiarity with regulatory expectations applicable to financial services environments
• Understanding of cybersecurity domains, particularly AI, cloud security, network security, and data protection
• Ability to provide solutions for the safe usage of AI technologies in a financial services organization
• Experience with MCP governance
• Experience with Microsoft Copilot, OpenAI ChatGPT, Anthropic Claude and other similar technologies
• Familiarity with AI security tools such as Palo Alto AIRS, CrowdStrike Falcon AI Detection and Response (AIDR)
• Deep experience with securing and governing Microsoft Azure and Amazon Web Services (AWS)
• Experience with cloud security tooling such as Orca, Prisma Access Cloud, Wiz
• Strong analytical and problem‑solving skills with the ability to evaluate complex security and technology risks
• Ability to provide objective risk assessments and effective challenge while building collaborative stakeholder relationships
• Support the ability to “shift left” and incorporate security early on and throughout the development lifecycle
• Strong written and verbal communication skills with the ability to translate technical concepts into business‑focused risk discussions

Responsibilities

• Provide independent assessments of information security risks across technology environments
• Evaluate the design and effectiveness of security controls against established frameworks and regulatory requirements
• Identify, analyze, and communicate cybersecurity risks to risk and business stakeholders
• Support governance and oversight of security domains including IAM, vulnerability, cloud security, application security, data protection, and cybersecurity operations
• Conduct risk assessments for new technologies, projects, systems, and business initiatives
• Provide effective challenge to first‑line security practices, risk decisions, control implementations, and remediation strategies
• Monitor and assess information security metrics, KRIs, control effectiveness, and trends
• Support development and maintenance of information security risk management policies, standards, methodologies, and governance processes
• Participate in regulatory examinations, internal audits, risk reviews, and compliance assessments
• Partner with Technology, Information Security, Compliance, Enterprise Risk, Internal Audit, and business stakeholders
• Prepare reporting and presentations that communicate technical risks, control gaps, and security trends
• Support oversight of third‑party technology providers and critical vendor security risk management
• Stay current on cybersecurity threats, regulatory developments, emerging technologies, and industry practices

Skills

InfoSec frameworks

Risk assessment

Regulatory knowledge

Cloud security

AI security

Communication skills

Analytical thinking

Stakeholder management

Education

Bachelor's degree or 4 years related experience

Tools

Azure

AWS

Orca

Prisma Access Cloud

Wiz

AIRS

CrowdStrike AIDR

Palo Alto Prisma AI

Job description

Jobtailor seeks an experienced information security risk professional to assess risks, controls, and processes across technology environments, including cloud and third‑party relationships. You will evaluate security designs, communicate risks to stakeholders, and help strengthen governance, policy, and risk reporting while staying current with AI security and regulatory developments.

The role emphasizes collaboration with technology, compliance, audit, and business teams to shift security left