Senior Cybersecurity Risk Analyst at Americaninstitutesforresearch

Americaninstitutesforresearch

US-Remote·8h ago

SeniorFull-timeRustAWSAzureGitAI

Salary Range

$127,075 - $171,925 /year

Estimated

This salary is estimated based on similar roles. The actual salary may vary.

About the Role

We are looking for a Cybersecurity Risk Analyst to join AIR’s Information Security Office. This key role will coordinate and drive institution-wide security initiatives, applying technical expertise across advanced security testing and risk management activities.

Key Responsibilities

→Drive and perform vulnerability management activities, including scanning, analyzing, and tracking findings across networks, containers, and applications
→Execute application security testing and findings analysis using DAST, SAST, and continuous threat exposure management
→Lead cyber risk management efforts by identifying risks, developing treatment plans, and maintaining the enterprise risk registry
→Oversee remediation of security findings using Plan of Action and Milestones processes
→Conduct internal controls assessments for AIR web applications and secure data enclaves
→Respond to client security and privacy questionnaires with subject-matter expertise
→Perform continuous monitoring to ensure compliance with policies and regulations
→Support data governance through information security plan and contract reviews
→Serve as AIR’s HIPAA Security Officer ensuring compliance with HIPAA Security Rule
→Support third-party risk management for new software and AI use cases

Requirements

✓Bachelor’s degree and at least 9 years of relevant information security experience
✓Major cybersecurity certification from ISC2, ISACA, OffSec, or SANS
✓5+ years of hands-on experience with vulnerability management and security testing tools
✓5+ years of experience securing and testing cloud environments (Azure, AWS, GCP)
✓2+ years of experience conducting cyber risk and assurance activities
✓Strong understanding of NIST SP 800-53, 800-171, and 800-88 standards
✓Ability to obtain a Level 6C Security clearance
✓Summary Bullets
✓Coordinate institution-wide security initiatives and risk management
✓Perform advanced security testing including DAST, SAST, and red teaming
✓Lead vulnerability management and remediation efforts
✓Conduct internal controls assessments for key systems
✓Ensure HIPAA compliance as Security Officer
✓Requirement Bullets
✓9+ years information security experience with relevant degree
✓Major cybersecurity certification required
✓Extensive experience with vulnerability management tools
✓Cloud security expertise in Azure, AWS, or GCP
✓Familiarity with NIST security frameworks
✓Security clearance eligibility required
✓Benefit Bullets
✓[]