Security Risk Analyst

Required Skills & Experience

• 2+ years of experience conducting secure design reviews and cybersecurity risk assessments across cloud, on-premise, and SaaS environments

• Strong knowledge of information security frameworks and standards, including CSA CCM, ISO, PCI DSS, NIST CSF, and/or NIST 800-53

• Previous cybersecurity experience in a consulting or advisory capacity, working with Technology, Project, Risk, and Business teams

• Experience assessing security risks and providing security recommendations based on application security testing, including Secure Code Review, DAST, and SAST

• Applied experience conducting threat modeling for new applications, services, or technology solutions

• Working knowledge of AI systems and security controls applicable to AI solutions and technologies

• Strong ability to identify, document, articulate, and communicate cybersecurity risks and recommendations to both technical teams and business leadership

• Experience collaborating with Risk and Privacy teams to ensure security assessments align with compliance and regulatory requirements

• Bachelor’s or Master’s degree in Information Technology, Computer Science, a related field, or equivalent relevant professional experience

Nice to Have Skills & Experience

• CISSP, CRISC, ISSAP, CISM, CISA, and/or CCSP certification

• Experience performing security assessments within a large enterprise or professional services environment

• Experience working with formal security assessment and risk management documentation, including Security Assessment Reports (SAR) and Quality Risk Management (QRM)

• Familiarity with security approval and governance processes for enterprise technology initiatives

Job Summary

Insight Global is seeking a Security Risk Analyst to join a leading professional services organization supporting its cybersecurity and security risk function.

The Security Risk Analyst will partner with Business, Risk, Privacy, and Technology teams to conduct cybersecurity risk assessments and ensure security is incorporated into the design of new business applications, services, and projects. This individual will assess potential threats and risks, review security requirements, and provide practical recommendations that align with organizational security standards, regulatory requirements, and business needs.

The ideal candidate has hands-on experience with security risk assessments, secure design, threat modeling, security frameworks, and application security testing, combined with the communication skills needed to work with both technical and non-technical stakeholders.

Key Responsibilities

• Partner with Business and Risk teams to gather information on new projects, applications, services, and technology requirements

• Conduct cybersecurity risk assessments and secure design reviews for cloud, on-premise, and SaaS environments

• Review business applications and services to ensure alignment with applicable security standards, policies, and compliance requirements

• Identify cybersecurity risks and provide practical security recommendations and remediation guidance

• Review application security testing outcomes, including Secure Code Review, DAST, and SAST, and recommend appropriate security actions

• Conduct threat-modeling exercises for new applications, services, and technology solutions

• Coordinate with Privacy, Risk, Business, and Technology teams to ensure security requirements and assessments are properly documented

• Document and track identified risks and recommendations through Security Assessment Reports (SAR) and Quality Risk Management (QRM) processes

• Obtain required NITSO approvals as applicable

• Maintain security tracking for critical business projects and initiatives

• Clearly communicate identified risks, recommendations, and security requirements to technical teams, business stakeholders, and leadership

AI: Artificial intelligence tools are used to assist in screening and assessing applicants for this position.

Vacancy: This posting is for a currently vacant role, and the successful candidate will be hired into an existing open position.