Senior Security Assurance Analyst

SWBC; United States; On-site; USD 90,000 - 135,000; Full time

Benefits offered by this job

Competitive pay

Work-life balance

Education opportunities

401(k) retirement plans

Wellness program

Job summary

SWBC is seeking a security professional to protect the organization, clients, and operations through risk-based assessments, third-party reviews, control validation, and assurance activities.

This role serves as a trusted advisor to technology, business, compliance, procurement, and security stakeholders, helping them understand and manage cybersecurity risk while supporting regulatory, contractual, and business requirements.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, or related field, or equivalent experience.
• Minimum of five years in cybersecurity, IT risk, IT audit, or related discipline.
• Experience conducting independent security assessments and documenting risk findings.
• Experience reviewing controls, vendor documents, SOC reports, and remediation plans.
• Experience with enterprise tech environments, cloud platforms, and third-party providers.
• Certifications such as CISSP, CISA, CRISC, GIAC preferred.

Responsibilities

• Perform security assessments of applications, systems, cloud services, and third-party solutions.
• Evaluate security controls, identify risks, gaps, and improvement opportunities.
• Develop risk-based, actionable recommendations for stakeholders.
• Document findings and risk decisions clearly and professionally.
• Review vendor security questionnaires, SOC reports, and penetration testing reports.
• Assess security capabilities of prospective and current third-party providers.
• Collaborate with Procurement, Legal, and business teams to address security concerns.
• Assist with internal and external audits and client assurance activities.
• Produce executive-ready summaries, risk narratives, and remediation recommendations.
• Present findings to technical and non-technical audiences.
• Support reporting on assessments, emerging risks, and security trends.

Skills

Security assessments

Risk management

Vendor risk

Audit support

Stakeholder comms

Education

Bachelor’s degree in Cybersecurity or related field

Job description

Job Overview

SWBC is seeking a talented individual who will protect the organization, its clients, and its business operations through risk-based security assessments, third-party security reviews, control validation, and assurance activities. This role serves as a trusted advisor to technology, business, compliance, procurement, and security stakeholders, helping them understand and manage cybersecurity risk while supporting regulatory, contractual, and business requirements. As a key member of the Security team, you will perform in-depth security assessments, evaluate vendor security programs, review security controls, analyze evidence, and develop clear, actionable recommendations that strengthen the organization’s security posture.

Responsibilities

• Perform security assessments of applications, systems, cloud services, technology platforms, business processes, and third-party solutions.
• Evaluate security controls and identify potential risks, control gaps, and improvement opportunities.
• Develop practical, risk-based recommendations that help stakeholders make informed business decisions.
• Document findings, conclusions, and risk decisions in a clear and professional manner.
• Review vendor security questionnaires, SOC reports, certifications, penetration testing reports, and supporting security documentation.
• Assess the security capabilities of prospective and existing third-party service providers.
• Partner with Procurement, Legal, business teams, and vendors to resolve security concerns and document residual risk.
• Assist with internal audits, external audits, client assurance requests, and regulatory examinations.
• Review evidence supporting security controls and evaluate control effectiveness.
• Help ensure documentation remains accurate, complete, traceable, and audit-ready.
• Produce executive-ready assessment summaries, risk narratives, and remediation recommendations.
• Present findings to technical and non-technical audiences.
• Support reporting on assessment activity, emerging risks, remediation efforts, and security trends.
• Work closely with Security, Technology, Compliance, Legal, Procurement, and business stakeholders.
• Help teams understand security requirements, control expectations, and business risks.
• Contribute to the ongoing enhancement of security assessment processes, templates, standards, and reporting practices.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, Information Systems, Risk Management, Audit, Computer Science, or a related field, or equivalent experience.
• Minimum of five (5) years of experience in cybersecurity, IT risk, IT audit, compliance, third-party risk management, security assessments, or related discipline.
• Experience conducting independent security assessments and documenting risk-based findings.
• Experience reviewing security controls, vendor documentation, SOC reports, audit artifacts, remediation plans, and compliance evidence.
• Experience working with enterprise technology environments, cloud platforms, and third-party service providers.
• At least one of the following certifications is required, others are strongly preferred: CISSP, CISA, CRISC, GIAC certifications, or other relevant cybersecurity, risk, audit, or assurance certifications.
• Experience performing vendor risk assessments or third-party security reviews.
• Experience supporting audits, examinations, or client assurance activities.
• Familiarity with cloud security, application security, identity and access management, or data protection controls.
• Experience using GRC, workflow, ticketing, or evidence management platforms.

Benefits

• Competitive overall compensation package.
• Work/life balance.
• Employee engagement activities and recognition awards.
• Years of Service awards.
• Career enhancement and growth opportunities.
• Leadership Academy and Mentor Program.
• Continuing education and career certifications.
• Variety of healthcare coverage options.
• Traditional and Roth 401(k) retirement plans.
• Lucrative Wellness Program (based upon employee eligibility).

Additional Information

SWBC is a Substance-Free Workplace and requires pre‑employment drug testing. SWBC does not hire tobacco users as allowed by law. To learn more, visit www.SWBC.com.