Principal Information Security Risk and Compliance Analyst
Boston, Massachusetts, United States
$135k-$168k/yrHybridFull Time
CarGurusNASDAQ: CARG: Operates an online marketplace for buying and selling vehicles.
8+ YOERequires 8+ years in information security, cyber risk, GRC, or IT audit; experience with cloud-native SaaS, SOC 2 Type II, SOX ITGCs, AI governance, risk assessments, and executive communication.
ProsegurBolsa de Madrid: PSG: Global provider of physical security, cash logistics, and technology.
Strong analytical and organizational skills, experience with intelligence/incident/video/dispatch systems, security procedures and life-safety knowledge, effective communicator under stress.
Center for Health Information and Analysis: Analyzes health care data to improve system transparency and affordability.
1+ YOE1+ year IT security experience (Level I) or 2+ years (Level II); knowledge of Azure and Microsoft technologies; experience with network/firewall tech; strong written and verbal English; perform risk/vulnerability assessments and incident response.
Active Directory, Microsoft 365, Microsoft Azure, Cisco, Palo Alto
Principal Technology Risk Analyst - Program & Regulatory Assurance
Merrimack or Smithfield or Westlake
OnsiteFull Time
Fidelity Investments: Provides investment management, retirement planning, and brokerage services.
5+ YOERequires 5–7 years in IT risk, controls, or audit; preferred bachelor's degree, risk or cloud certifications, financial services controls experience, cloud security knowledge, and GRC tool experience.
Principal Technology Risk Analyst - Program & Regulatory Assurance
Merrimack or Smithfield or Westlake
OnsiteFull Time
Fidelity Investments: Provides investment management, retirement planning, and brokerage services.
5+ YOE5+ years in IT risk, controls, or audit; experience documenting controls in large financial services environments; knowledge of cloud, network, resiliency, and security controls; strong communication and analytical skills.
ProsegurBolsa de Madrid: PSG: Global provider of physical security, cash logistics, and technology.
2+ YOEBachelor’s degree in security studies, international relations, or related field, or equivalent intelligence training; intelligence analysis experience; OSINT, social media, and intelligence tool expertise; strong analytical and communication skills.
OSINT, Ontic, Factal, Everbridge, International SOS
DigitalOceanNew York Stock Exchange: DOCN: Simplifies cloud infrastructure for developers, startups, and SMBs.
6+ YOE6+ years in detection & response, insider risk, or security engineering; hands-on UEBA/SIEM/DLP/UAM/SOAR; scripting with Python/Go/Bash; familiarity with macOS, Windows, Linux, Kubernetes and cloud; knowledge of MITRE ATT&CK and NIST.
Securities Finance Front Office Market Risk Analyst, Vice Presidentnalyst
Boston or Jersey City
$130k-$220k/yrOnsiteFull Time
State StreetNYSE: STT: Provides investment servicing and management to institutional investors.
10+ YOEBachelor's degree in a related field and 10+ years in FCM, futures clearing, listed derivatives, repo, securities financing, or front-office market risk. Requires margin, liquidity, counterparty risk, controls, and stress-testing expertise.
Ross StoresNASDAQ: ROST: Operates an off-price retail chain selling clothing and home goods.
5+ YOEFive years of IT experience, including three in security or risk management; bachelor's degree preferred; security governance, compliance, risk management, analytical, communication, and project management skills required.
Microsoft Word, Microsoft Excel, Microsoft PowerPoint, UNIX, Windows, Firewalls, VPN, PKI, IPS, Oracle, MS SQL
Data, AI and Emerging Technology Risk Principal Analyst
Johnston or Iselin or Westwood or Phoenix
HybridFull Time
Citizens Financial GroupNYSE: CFG: Provides retail, commercial, and private banking services to customers.
7+ YOE7+ years IT risk experience; deep expertise with CRI/NIST/COBIT/ITIL; experience with cloud, data platforms, analytics, and security tools; strong executive communication and mentoring skills.
WHOOP: Wearable technology for personalized health and performance tracking.
6+ YOE6+ years in cybersecurity or enterprise risk; experience conducting structured cyber/IT risk assessments, maintaining risk registers, familiarity with security frameworks and AI risk; strong communication and analysis skills.
NIST CSF, ISO 27001, PCI DSS, GDPR, HIPAA, NIST AI RMF, ISO/IEC 42001, FAIR
Cambridge or New York City or Washington or Atlanta or San Francisco
$119k-$193k/yrOnsiteFull Time
ForresterNASDAQ: FORR: Provides market research and business advisory services to global leaders.
5+ YOERequires 5+ years of security and risk experience, BA/BS or equivalent, strong research, critical thinking, writing, presentation, and business skills; must be a US citizen and travel 30%-50%.
Managed Detection and Response (MDR), Managed Security Services (MSS), Zero Trust
State StreetNYSE: STT: Provides investment servicing and management to institutional investors.
3+ YOEBachelor’s in cybersecurity or related field; 3-5 years in cybersecurity or technology risk; experience with cyber security products; knowledge of NIST/ISO 27001; familiarity with security tools.
Control Risks: Provides risk management, security, and strategic intelligence consulting services.
1+ YOE1–3 years in corporate or governmental security, familiarity with global risk intelligence and incident response, emergency notification and travel risk systems experience advantageous, strong open-source analysis and communication skills.
Control Risks: Provides risk management, security, and strategic intelligence consulting services.
1+ YOEBachelor's preferred; 1–3 years corporate or governmental security experience required; familiarity with global risk intelligence, incident response, and mass notification/travel risk systems; strong open-source analysis and communication skills.
Arizona or California or Florida or Georgia or Illinois or Massachusetts or Michigan or New Hampshire or New York or New Mexico or North Carolina or Tennessee or Virginia or Medford
$75k-$95k/yrRemoteFull Time
Agero: Provides digital roadside assistance and accident management software solutions.
3+ YOERequires 3–5 years in information security compliance and hands-on experience with PCI-DSS, SOC 2, or ISO 27001 frameworks, including control mapping, evidence evaluation, risk mitigation, and strong communication skills.