Senior Security Risk Analyst

Job Description

• Conduct comprehensive risk assessments to identify information security risks, potential threats, and vulnerabilities resulting from business operations • Develop and present detailed reports on risk assessments, including identified threats, vulnerabilities, and the effectiveness of implemented mitigation measures. Ensure these reports are understandable to technical and non-technical stakeholders, including senior management • Take an active role and work in concert with IT Procurement and Legal in the design, management, and maturation of Third-Party Risk Management and vendor management • Lead significant compliance projects to integrate and uphold standards such as ISO 27001/27701, HIPAA, NIST, FedRAMP, GDPR, CCPA, and SOC 2 • Serve as a mentor and key point of escalation within the team, providing expert guidance, resolving complex issues, and promoting a culture of security awareness and risk management across the organization • Leverage extensive technical knowledge and communication skills to effectively interact with engineers and technologists, providing clear guidance and recommendations on security and compliance best practices • Demonstrate a process-oriented, results-driven approach to compliance engineering, employing effective problem-solving and communication skills to serve as a subject matter expert and trusted advisor within Postman

Qualifications

• Minimum of ten years of experience in cybersecurity governance, risk management, and compliance, with a focus on risk assessments/management • Relevant certifications such as CRISC, CISSP, CISM, or CISA is a plus • Knowledge and experience with risk management frameworks, including NIST RMF, FAIR, and ISO • Experience with GRC programs, including ISO 27001, HIPAA, and FedRAMP, preferably in a Cloud/SaaS environment • Proficient in technical knowledge related to management information systems, audits, and internal controls • Self-motivated and organized, with a proven ability to meet deadlines • Excellent interpersonal skills and the ability to build relationships across departments and cultures

Benefits

• Full medical coverage • Flexible PTO • Wellness reimbursement • Monthly lunch stipend