Senior IT Risk & Security Analyst (Remote)

Symetra Financial Corporation; Northern (KY); Hybrid; USD 80,000 - 133,000; Full time

Benefits offered by this job

Flexible full-time or hybrid telecommu

401(k) with company match up to 6%

Paid time off and holidays

Volunteer matching

Job summary

Symetra Investment Management is hiring a Senior IT Risk and Security Analyst to bridge IT, Audit Services, and business teams. You will manage IT risk assessments, oversee SOX ITGCs, and drive remediation across vendors and controls while developing executive dashboards for leadership.

You will collaborate with security teams, procurement, and legal to strengthen the risk posture and ensure sustainable compliance across technology and business functions.

Qualifications

• Strong knowledge of information security, IT risk management, audit methodologies, compliance frameworks, and internal controls.
• Experience leading complex risk assessments, audit programs, and compliance initiatives.

Responsibilities

• Serve as trusted advisor to IT and business teams by identifying risks and recommending controls.
• Lead enterprise IT risk management activities including annual risk assessments and risk reporting.
• Support third-party technology risk management across the vendor lifecycle, including due diligence and assessments.
• Manage IT audit and compliance programs to ensure controls are effective.
• Track audit findings with stakeholders to drive remediation and training.

Skills

Information security

IT risk management

Audit methodologies

Compliance frameworks

Stakeholder management

Education

Bachelor's degree in Information Systems/Cybersecurity/Accounting/Business

Tools

ISO 27001

SOX ITGCs

Job description

Symetra Investment Management is hiring a Senior IT Risk and Security Analyst to bridge IT, Audit Services, and business teams. You will manage IT risk assessments, oversee SOX ITGCs, and drive remediation across vendors and controls while developing executive dashboards for leadership.

You will collaborate with security teams, procurement, and legal to strengthen the risk posture and ensure sustainable compliance across technology and business functions.