35 information security risk jobs at 23 companies in Denver, CO
1mo
Save
Mark Applied
Hide
1mo
Information Security Officer
Chicago or Washington or Denver
$99k-$145k/yrOnsiteFull Time
Bank of AmericaNYSE: BAC: Provides banking, investment, and financial risk management services.
5+ YOERequires 5+ years in information security, technology and application security experience, cloud experience with Microsoft Azure, Amazon Web Services and Google Cloud Platform, risk management, and strong communication skills.
Microsoft Azure, Amazon Web Services, Google Cloud Platform, PaaS, SDLC
Bank of AmericaNYSE: BAC: Provides global banking, investing, and financial risk management services.
5+ YOERequires 5+ years in information security, 2–5 years in technology and application development or security, cloud experience with Azure, AWS, and Google Cloud Platform, risk management, and strong communication skills.
Microsoft Azure, Amazon Web Services, Google Cloud Platform, PaaS, SDLC
5+ YOEBachelor's in related field (or equivalent), 5+ years resilience/risk experience, financial services preferred, pursuing or holding CISM/CISSP/CRISC/CISA, working knowledge of NIST CSF and NIST Privacy Framework, strong documentation and communication skills.
KlaviyoNYSE: KVYO: Software platform for automated e-commerce marketing and customer data.
7+ YOE7+ years in information/technology/cyber risk with hands-on risk engineering, cyber risk quantification, SQL and Python skills, API integration, knowledge of security/AI frameworks and risk tooling.
Tract Capital: Alternative asset manager focused on digital infrastructure and data centers.
10+ YOE5+ Mgmt10+ years information security experience with 5+ years in CISO-level roles; expertise in ISO/NIST/SOC2, Microsoft 365 security stack, third-party risk, incident response, and investor-facing communications.
ISO/IEC 27001, NIST 800-53, SOC 2 Type II, GDPR, CCPA, Microsoft Purview Compliance Manager, Microsoft Entra ID, Defender XDR, Microsoft Purview, Intune, Microsoft 365, KnowBe4, Glean, OWASP, MITRE ATT&CK, NIST 800-115
Washington or Boston or Dallas or Chicago or Miami or Denver or Orange or Los Angeles or Las Vegas or Sacramento or Phoenix or San Diego or United States
$130k-$160k/yrRemoteFull Time
DanaherNYSE: DHR: Develops scientific instruments and diagnostic tools for healthcare markets.
7+ YOE7+ years in third-party/vendor risk, enterprise risk, or vendor security; experience administering vendor questionnaires, reviewing SOC 2/ISO 27001 evidence, scoring at scale, reviewing cybersecurity contract provisions, and operating enterprise risk registers.
CrocsNASDAQ: CROX: Design and distribution of casual foam footwear and accessories.
4+ YOE4+ years in governance, risk, compliance, audit, or information security; working familiarity with AI/ML and LLMs; strong SOX and privacy awareness; excellent policy, risk assessment, and documentation skills.
1+ YOERequires a four-year degree plus 1–2 years of experience, a two-year degree with equivalent experience, or equivalent work experience; knowledge of LLM architectures, prompt engineering, and AI security risks.
Large Language Model (LLM), OWASP, NIST AI RMF, MITRE ATLAS
Lone Tree or Austin or Westlake or Southlake or Omaha or Orlando
$120k-$170k/yrOnsiteFull Time
Charles SchwabNYSE: SCHW: Financial services, brokerage, and investment management provider.
5+ YOEBachelor’s degree in information security, computer science, or related field; 5+ years in technology or cybersecurity risk, audit, oversight, or controls; strong analytical, communication, and stakeholder influence skills.
Pittsburgh or Denver or Birmingham or Dallas or Strongsville or Phoenix or Cleveland or Lakewood
$91k-$186k/yrOnsiteFull Time
PNC Financial ServicesNYSE: PNC: Provides banking, lending, and investment services to customers.
5+ YOEBachelor's degree and 5+ years of relevant industry experience. Requires expertise in IAM governance, risk and controls, audit support, security assessments, analytical problem-solving, and stakeholder influence.
Loenbro: Provides technical construction and maintenance for critical infrastructure.
5+ YOERequires 5–10+ years in cybersecurity or information security, vulnerability program management, incident response, change management, risk reporting, and infrastructure, cloud, networking, and endpoint technologies.
Tenable, CrowdStrike Falcon, Windows, Linux, Active Directory, Azure AD, Entra ID, MDR, Threat Intelligence, ticketing systems, change management systems
York Space SystemsNYSE: YSS: Designs and manufactures modular spacecraft platforms and mission solutions.
3+ YOE3+ years cybersecurity/GRC experience; familiarity with NIST SP 800-171, CMMC, RMF, ISO 27001, SOC 2; experience with GRC platforms (Hyperproof); strong documentation and communication; US citizenship and ability to obtain a security clearance; onsite Greenwood Village, CO.
Hyperproof, Microsoft GCC High, NIST SP 800-171, NIST CSF, CMMC, RMF, ISO 27001, SOC 2
Breakthru Beverage Group: Distributes alcoholic and non-alcoholic beverages to North American businesses.
7+ YOE7+ years IT security experience, CISSP required; expertise in networking, Windows and Linux administration, AWS/Azure, IaC (HCL/YAML/JSON), scripting (PowerShell, Python, Go, Shell), incident response, risk management, and security tooling.
Jeppesen ForeFlight: Provides integrated software and data solutions for aviation flight planning.
10+ YOE10+ years in security engineering or architecture with 3+ years as a principal/staff-level IC; hands-on with cloud (AWS, Microsoft Azure), IAM, VPC, Okta/Entra ID/Azure AD, EDR/XDR, SIEM, SOAR; knowledge of NIST CSF, ISO 27001, SOC 2; strong communication and risk-to-engineering delivery.
Okta, Microsoft Entra ID, Microsoft Azure AD, AWS, Microsoft Azure, IAM, VPC, EDR, XDR, SIEM, SOAR, NIST CSF, ISO 27001, SOC 2, FAA, EASA, DoD, CMMC
Seattle or Arlington or New York or Denver or Chicago or San Francisco or Dallas or Los Angeles County
$131k-$204k/yrOnsiteFull Time
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
3+ YOERequires a bachelor's degree or equivalent, 3+ years in cloud architecture, security and risk management, and integration, testing, and automation. Strong AWS, communication, and technical problem-solving skills required.
Cornerstone Capital Bank: Provides residential mortgage financing and retail banking services.
10+ YOE10+ years information and physical security experience in the financial sector, 5+ years mid-to-large bank security experience preferred; bachelor’s degree preferred; CISSP/CRISC/CPP/PSP preferred; strong risk management and communication skills; Microsoft Office proficiency.
Microsoft Word, Microsoft Excel, Microsoft Outlook
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yrOnsiteFull Time
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
Concord or Raleigh or New York or Fairfield or Atlanta or Bellevue or Charlotte or Spokane or Austin or Dallas or Portland or San Francisco or San Diego or Santa Clara or Santa Ana or Arvada or Los Angeles or Sacramento or Oakland or Roseville or Fresno
$200k-$225k/yrOnsiteFull Time
Swinerton: National commercial construction firm providing building and management services.
15+ YOE7+ MgmtLead enterprise cybersecurity, compliance, privacy and risk programs; 15+ years IT/cybersecurity experience, 7+ years people leadership, experience with auditable compliance programs and vendor management.
US E-Consulting Services-Power and Utilities OT Operational Technology-Manager-Cyber/Enterprise Security-352459
Houston or Dallas or Cleveland or Detroit or St. Louis or Pittsburgh or Boston or Charlotte or Atlanta or Miami or Memphis or Denver or Phoenix or Salt Lake City or Los Angeles or San Diego or San Francisco or Seattle
$135k-$265k/yrHybridFull Time
Deloitte: Provides professional audit, consulting, advisory, and tax services.
7+ YOE7+ years in Power and Utilities OT security, with governance and risk management expertise.
Salt Lake City or Seattle or Phoenix or Los Angeles or San Francisco or Denver or Washington or Miami or Atlanta or Chicago or Indianapolis or New Orleans or Boston or Minneapolis or Kansas City or Albuquerque or New York or Oklahoma City or Portland or Austin
$75k-$124k/yrOnsiteFull Time
Department of Labor: Protects American workers' rights and ensures fair labor practices.
1+ YOERequires GS-11 specialized cybersecurity experience, including FISMA, NIST, and RMF implementation, security reviews, risk assessments, cybersecurity analysis, and IT competencies.