Senior IT Risk & Security Analyst - Remote

Symetra; United States; Remote; USD 80,000 - 133,000; Full time

Benefits offered by this job

Flexible full-time or hybrid telecommu

401(k) with company matching up to 6%

Paid time off + holidays

Company matching charitable giving

Job summary

Symetra is actively seeking a Senior IT Risk and Security Analyst to bridge IT, Audit, and business risk. You will evaluate IT controls, lead risk assessments, and drive remediation across the vendor ecosystem while coordinating with security, procurement, and legal teams.

The role emphasizes ISO 27001, SOX ITGCs, policy development, and executive reporting. Ideal candidates bring deep risk-management experience, strong communication skills, and a proven ability to translate technical risk into

Qualifications

• Bachelor's degree in information systems, cybersecurity, computer science, accounting, business, or related field.
• 5–8 years of experience in IT risk management, information security, IT audit, governance, compliance, or related disciplines.
• Professional certifications such as CISA, CISSP, CRISC, CISM, CIA, ISO 27001 Lead Implementer/Auditor, or other relevant credentials.

Responsibilities

• Serve as trusted advisor to IT and business teams by identifying tech, security, and operational risks and recommending controls.
• Lead enterprise IT risk management activities including annual risk assessments and risk reporting.
• Support third-party technology risk management across vendor lifecycle including due diligence and assessments.
• Manage IT audit and compliance programs including ITGCs, ISO 27001, and regulatory requirements.
• Track audit findings with stakeholders to drive remediation and ensure sustainable compliance.

Skills

IT risk management

Information security

Audit methodologies

Compliance frameworks

Internal controls

Education

Bachelor's degree

Job description

Symetra is actively seeking a Senior IT Risk and Security Analyst to bridge IT, Audit, and business risk. You will evaluate IT controls, lead risk assessments, and drive remediation across the vendor ecosystem while coordinating with security, procurement, and legal teams.

The role emphasizes ISO 27001, SOX ITGCs, policy development, and executive reporting. Ideal candidates bring deep risk-management experience, strong communication skills, and a proven ability to translate technical risk into