Senior Security Risk & Technical Assurance Leader

Gambit Technologies; New York (NY); Hybrid; USD 130,000 - 170,000; Full time

Job summary

Gambit Technologies in New York City is seeking a Senior Security Risk & Technical Assurance Analyst to join a small security team reporting to the CISO. The role blends governance, risk, and hands-on testing across vendor risk reviews, technical validation, and security controls within DLP and the stack.

7+ years of-depth in GRC and hands-on security, with knowledge of NIST CSF, 800-53, CIS, MITRE ATT&CK. CISSP/CISA/CRISCGPEN/OSCP count.

Qualifications

• 7+ years of experience across GRC and hands-on security.
• Knowledge of NIST CSF, 800-53, CIS, MITRE ATT&CK.
• Certifications such as CISSP, CISA, CRISC, GPEN, OSCP are valuable.

Responsibilities

• Lead vendor risk assessments and security reviews.
• Perform hands-on technical validation and threat assessment.
• Evaluate evidence from SOC 2, breach-notification terms, and CVE reachability.
• Contribute across the security stack and DLP.
• Interact with counsel on terms and risk posture.

Skills

GRC experience

Hands-on security testing

Vendor risk assessment

NIST CSF

MITRE ATT&CK

CIS controls

Security controls

Tools

Splunk

CrowdStrike

Netskope

Qualys

Gurucul

Symantec ProxySG

Swimlane

BlinkOps

Job description

Gambit Technologies in New York City is seeking a Senior Security Risk & Technical Assurance Analyst to join a small security team reporting to the CISO. The role blends governance, risk, and hands-on testing across vendor risk reviews, technical validation, and security controls within DLP and the stack.

7+ years of-depth in GRC and hands-on security, with knowledge of NIST CSF, 800-53, CIS, MITRE ATT&CK. CISSP/CISA/CRISCGPEN/OSCP count.