Sr. Security Risk Analyst

VC5 Consulting; Houston (TX); On-site; USD 110,000 - 140,000; Full time

Job summary

VC5 Consulting seeks an experienced security professional to support threat modeling, vulnerability scanning, and audits while leading security framework certification efforts. The role designs, develops, and implements IT security controls for cloud-based enterprise systems, ensuring policy alignment and compliance.

You will collaborate across teams to assess risks and advise on mitigations, improving the organization's security posture.

Qualifications

• Bachelor's degree preferred in a related field.
• Minimum 7 years of experience with security frameworks and implementing cybersecurity controls across a heterogeneous environment.
• Knowledge of risk management frameworks and applying risk methodologies.
• Experience with third-party risk assessments and security auditing procedures.
• Experience with security compliance monitoring tools including SIEM, vulnerability scanning, DLP and PAM.
• Understanding of DevOps and CI/CD practices and tools, particularly in relation to security.

Responsibilities

• Design, develop, and implement IT security controls for cloud-based enterprise business systems to meet compliance requirements.
• Lead security framework certification efforts, ensuring adherence to established security standards.
• Conduct vulnerability, risk, and security assessments of networks, hardware, and software to identify potential threats.
• Manage the effectiveness of security tooling and define metrics for the security automation program.
• Serve as an internal security consultant, advising teams on mitigating controls related to policy and standard exceptions.
• Engage in discussions on technology security risks and recommend actions to mitigate them.

Skills

Security frameworks

Cybersecurity controls

Risk management

Third-party risk

Security auditing

SIEM

Vulnerability scanning

DLP

PAM

DevOps security

CI/CD security

Education

Bachelor's degree preferred

Tools

SIEM tooling

Vulnerability scanners

DLP tooling

PAM tooling

CI/CD tooling

Job description

This role involves supporting security team projects such as threat modeling, vulnerability scanning, and audits, while leading security framework certification efforts. The individual will design, develop, and implement IT security controls for cloud-based enterprise business systems, ensuring alignment with policy and compliance requirements. You will collaborate with various teams to assess risks and advise on mitigating controls, making a significant impact on the organization's security posture.

Key Responsibilities

• Design, develop, and implement IT security controls for cloud-based enterprise business systems to meet compliance requirements.
• Lead security framework certification efforts, ensuring adherence to established security standards.
• Conduct vulnerability, risk, and security assessments of networks, hardware, and software to identify potential threats.
• Manage the effectiveness of security tooling and define metrics for the security automation program.
• Serve as an internal security consultant, advising teams on acceptable mitigating controls related to policy and standard exceptions.
• Engage in discussions on technology security risks and recommend appropriate actions to mitigate them.

Required Qualifications

• Bachelor’s degree preferred in a related field.
• Minimum 7 years of experience working with security frameworks and implementing cybersecurity controls across a heterogeneous environment.
• Knowledge of risk management frameworks and applying risk methodologies.
• Experience associated with third-party risk assessments and security auditing procedures.
• Experience with security compliance monitoring tools including SIEM tools, vulnerability scanning tools, DLP, and PAM.
• Understanding of DevOps and CI/CD practices and tools, particularly in relation to security.
• Location: Houston, TX 77073

This is a unique opportunity to influence the continuous improvement of a security program while engaging in diverse security assessments and risk management processes.