Senior Analyst, Security Risk
Manages and matures enterprise security risk operations, including risk assessments, registers, treatment strategies, reporting, automation, and audit coordination. Requires at least five years of security-focused risk management experience and familiarity with established risk frameworks and technical control environments.
About the job
Responsibilities
- Execute and improve daily operations of the One Twilio Risk Management program, including automating cyber-risk operations.
- Manage and maintain risk registers to track key risk indicators (KRIs) and ensure risks are identified, evaluated, and appropriately mitigated.
- Collaborate with cross-functional teams to communicate risks clearly and make them actionable.
- Review risk-treatment strategies and recommend solutions.
- Prepare and deliver risk reports, dashboards, and presentations highlighting risk trends, issues, and mitigation efforts.
- Analyze risk data from multiple sources to assess trends and develop predictive models for potential risks.
- Use data analytics and risk-modeling tools to assess the legal, financial, operational, and security impact of risks.
- Develop ad hoc reports and presentations to support risk decision-making.
- Coordinate with internal and external auditors to support compliance assessments and resolve risk-related findings.
Requirements
- 5+ years of risk-management experience working with security-centric risk-management and compliance frameworks.
- Experience maturing an industry-accepted risk framework, including NIST Risk Management Framework, COSO Enterprise Risk Management, or ISO 31000.
- Strong cross-functional collaboration and relationship-building skills.
- Experience designing and executing qualitative and quantitative risk analyses that translate technical vulnerabilities into measurable business impact.
- Experience translating vulnerabilities, control gaps, and systemic limitations into clear, actionable risk statements.
- Experience managing large-scale, heavily regulated, multi-entity, cross-functional risk assessments, risk registers, and compliance programs.
- Experience working with technical security and Engineering/IT teams to implement technical risk and control solutions.
- Ability to interpret control requirements and communicate them to stakeholder groups.
- Bias toward automation and tooling to scale program impact.
- Experience leveraging AI to streamline risk operations.
- Excellent verbal, written, and interpersonal communication skills.
- Ability to manage multiple projects under tight deadlines, work with ambiguity, and adapt to rapidly changing environments.
- Strategic thinking and problem-solving skills.
Nice-to-haves
- Bachelor's degree in Risk Management, Business, Finance, Cybersecurity, or a related field.
- Professional certification such as CRISC, CISA, CISSP, or FRM.
- Strong analytical and problem-solving skills, including the ability to interpret complex data and present actionable insights.
- Strong proficiency with enterprise AI and GRC tooling.
- Experience with project management and cross-functional work.
Compensation and Benefits
- Estimated pay range: $99,760–$124,700.
- Target bonus: 12.5%.
- Benefits may include paid time off, parental and wellness leave, healthcare, retirement savings, incentive programs, equity grants, and other location-dependent benefits.
- Occasional travel may be required for project or team meetings.
Skills
Risk Management, Nist Risk Management Framework, Coso Enterprise Risk Management, Iso 31000, Risk Registers, Key Risk Indicators, Quantitative Risk Analysis, Qualitative Risk Analysis, Grc Tooling, Artificial Intelligence, Data Analytics, Predictive Modeling, Compliance Auditing, Crisc, Cisa
Similar jobs
Business Operations jobs
Prompt Health
Remote
Own executive operating rhythms, decision support, and high-priority cross-functional initiatives while partnering closely with senior leaders. The role requires 5+ years of experience, strong synthesis and business-operations skills, advanced spreadsheet proficiency, and exceptional judgment with confidential information.
Dandy
Remote
Leads procurement operations for production materials, managing purchase orders, inventory health, supplier performance, and process improvements. Requires at least three years of procurement or supply-chain experience, manufacturing purchasing experience, ERP proficiency, and advanced spreadsheet skills.
Polymarket
Remote
Build and lead a fraud operations function, managing investigators and BPO partners while establishing workflows, SLAs, quality standards, and reporting. The role requires 7+ years in fraud, risk, financial crimes, payments, or trust and safety, plus direct people-management experience.
Improbable
Remote
Operating Partner serving as a generalist problem solver for the founding team, owning high-priority initiatives across growth, revenue, functions, and operations. Requires 8+ years of relevant experience, leadership of teams of 10+ people, strong execution under ambiguity, and fluency with AI tools.
Cohere
United StatesManages end-to-end professional services procurement, including strategic sourcing, category management, RFPs, negotiations, contracts, and supplier performance. The role requires 8–10 years of procurement experience, strong stakeholder influence, and expertise in cost optimization and procure-to-pay processes.