Senior Security Risk Analyst

Centene Corporation

. Own and manage the lifecycle and documentation of cybersecurity risks .

Posted 11/4/2026full-timeRemote • Missouri • United StatesSenior💰 $87,700 - $157,800 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing cybersecurity risks through effective lifecycle management, documentation, and reporting. Proficient in aligning cybersecurity practices with enterprise risk management frameworks and standards such as NIST CSF and ISO/IEC 27001.

Highest-signal resume keywords

Cybersecurity Risk ManagementEnterprise Risk ManagementGRC Platforms (Archer)Risk Assessment MethodologiesCISSP Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity Risk Register ManagementRisk Taxonomy DevelopmentRisk Treatment StrategiesControl MonitoringData Quality Improvement

Soft Skills

Cross-Functional CollaborationStakeholder EngagementWritten CommunicationVerbal Communication

Tools & Technologies

GRC PlatformsDashboardsScorecardsMetrics Governance

Certifications & Qualifications

CISSPSecurity+CISMCISACGEITCRISC

Industry Keywords

NIST CSFISO/IEC 27001HIPAA Security RuleHITRUST CSFSOC 1SOC 2

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Own and manage the lifecycle and documentation of cybersecurity risks
Coordinate risk intake, documentation, validation, monitoring, escalation, and reporting
Develop and maintain standardized processes for capturing risks from cybersecurity GRC workstreams
Design and maintain the cybersecurity risk register structure, including taxonomy, categorization, scoring, lifecycle states, ownership, thresholds, workflows, and responsibilities
Own and maintain the cybersecurity component of the enterprise risk register
Coordinate with Enterprise Risk Management to align cybersecurity and enterprise risk management programs
Engage cybersecurity risk owners to understand risk causes, drivers, impacts, mitigation strategies, remediation plans, projects, and controls
Advise stakeholders on risk documentation standards, ownership, status updates, and escalation protocols
Provide reporting on individual risks and the overall cybersecurity risk profile
Highlight top, emerging, and persistent cybersecurity risks for prioritization and executive decision-making
Coordinate with penetration testing, risk assessment, control monitoring, maturity assessment, and security issue management teams
Develop and improve dashboards, scorecards, and recurring cybersecurity risk reporting
Partner with metrics, reporting, data, and analytics teams to improve data quality, automation, consistency, and scalability
Participate in specialty GRC projects, including framework mapping, tooling enhancements, audit support, lifecycle improvements, metrics governance, and risk deep dives
Develop and maintain cybersecurity risk management documentation, policies, standards, procedures, templates, guidance materials, and roadmaps
Ensure practices align with NIST CSF, ISO/IEC 27001, HIPAA Security Rule, HITRUST CSF, SOC 1/SOC 2, and ARC AMPE
Promote transparent, accountable, risk-aware decision-making through timely, customer-focused risk insights
Perform other duties as assigned
Comply with all policies and standards

Requirements

What you’ll need

Must be authorized to work in the U.S. without employment-based visa sponsorship now or in the future
Bachelor's degree in IT, MIS, Accounting, Finance, Business Administration, related field or equivalent experience
4+ years of combined auditing and IT controls design experience
Knowledge of IT systems and processes
Experience evaluating internal technical control systems
4+ years of experience in enterprise risk management, operational risk, cybersecurity governance, risk and compliance (GRC), audit, or related disciplines within a large or regulated enterprise environment
Demonstrated hands-on experience managing, administering, or materially contributing to a formal cybersecurity or technology risk register
Strong working knowledge of risk assessment methodologies, risk taxonomies, inherent risk, residual risk, risk appetite, risk tolerance, and risk treatment strategies
Understanding of the cybersecurity risk management lifecycle
Experience supporting GRC-related initiatives or projects beyond steady-state operations preferred
Experience using Archer or comparable GRC platforms strongly preferred
Ability to work cross-functionally and facilitate discussions with senior and executive-level stakeholders
Strong written and verbal communication skills
CISSP, Security+, CISM, CISA, CGEIT, or CRISC certification required

Benefits

Comp & perks

Health insurance
401K plan
Stock purchase plans
Tuition reimbursement
Paid time off plus holidays
Flexible approach to work with remote, hybrid, field or office work schedules
Additional forms of incentives may be included in total compensation
Equal opportunity employer committed to diversity