Security Analyst

• Lead information security risk assessments across applications, infrastructure, cloud services, business processes, projects, integrations, and third-party suppliers
• Determine inherent and residual risk ratings using approved criteria, documented evidence, and clear rationale
• Identify control gaps and evaluate security control design, implementation, and effectiveness
• Develop risk statements and recommend practical risk treatment options
• Map risks and findings to internal policies, control procedures, regulatory requirements, and security frameworks
• Partner with business and risk owners on remediation and risk treatment plans
• Maintain and continuously improve the centralized information security risk register
• Conduct third-party supplier security risk assessments and review assurance documentation, certifications, reports, testing evidence, contractual requirements, and control gaps
• Assess emerging technology risks, including artificial intelligence, and advise on governance and controls
• Collaborate with Security, Privacy, Legal, Compliance, Audit, Technology, Procurement, Business Relationship Management, and business stakeholders
• Prepare risk summaries, dashboards, metrics, and management reporting
• Monitor changes in technology, business processes, suppliers, threats, vulnerabilities, regulations, and control environments, initiating reassessments when appropriate

Explore Senior Risk Analyst, Information Security Risk Management at BCD Travel. Review requirements and application details.