3mo
Save
Mark Applied
Hide
Enterprise Risk Analyst
Denver or Long Beach or Washington DC
$115k-$165k/yr OnsiteFull Time
5+ YOEEnterprise risk and third-party risk focus; knowledge of NIST RMF, CMMC; experience with risk quantification methods like FAIR/OCTAVE; collaboration across engineering, security, legal, and operations.
NIST RMF, CMMC, OCTAVE, FAIR, Jira, Confluence, MS Project, GRC platforms
1mo
Save
Mark Applied
Hide
Senior Cybersecurity Risk Analyst - USA Remote
Washington or Boston or Dallas or Chicago or Miami or Denver or Orange or Los Angeles or Las Vegas or Sacramento or Phoenix or San Diego or United States
$130k-$160k/yr RemoteFull Time
7+ YOE7+ years in third-party/vendor risk, enterprise risk, or vendor security; experience administering vendor questionnaires, reviewing SOC 2/ISO 27001 evidence, scoring at scale, reviewing cybersecurity contract provisions, and operating enterprise risk registers.
Shared Assessments SIG, NIST SP 800-161, ISO/IEC 27036, GDPR, HIPAA, PCI DSS, SOX, SOC 2, ISO 27001, NIST AI RMF, ISO/IEC 42001, OneTrust, ServiceNow IRM, RSA Archer
2w
Save
Mark Applied
Hide
Sr Information Security GRC Analyst
Irvine, California, United States
$130k-$170k/yr OnsiteFull Time
7+ YOE7+ years GRC or related experience, experience with HITRUST/ISO 27001/SOC 2/NIST, third-party risk assessments, strong documentation and stakeholder skills, bachelor's degree in related field required.
HITRUST, ISO 27001, SOC 2, NIST CSF, PCI DSS, UK Cyber Essentials, NIS2, HIPAA, FDA