Network Security Risk & Compliance Analyst II

Location;
Newport Beach, CA

The Network Security Risk and Compliance Analyst serves as the primary liaison between Network Security, Cyber Risk, Operational Risk and Resilience (OR&R), Audit, Vulnerability Management, and Security Operations teams. This role is responsible for driving the maturity, effectiveness, and compliance of the Network Security program through control assessments, risk management, vulnerability remediation oversight, incident response coordination, and security assurance activities.

This is not a traditional SOC analyst or firewall administration role. Success in this position requires experience with cybersecurity governance, control assurance, risk management, vulnerability remediation, incident response coordination, and cross-functional security program leadership.

The ideal candidate possesses a blend of cybersecurity governance, risk management, compliance, vulnerability management, incident response, and network security experience, with the ability to influence outcomes across technical and business stakeholders.

• Act as the Network Security representative for OR&R, Cyber Risk, Audit, and Compliance activities.
• Support assessments and ongoing effectiveness reviews of Network Security controls within the Enterprise Control Model.
• Coordinate evidence collection, remediation activities, issue tracking, and risk treatment plans.
• Identify control gaps and partner with engineering and operations teams to drive corrective actions.

• Coordinate remediation activities for vulnerabilities impacting network security platforms and services.
• Partner with Vulnerability Management teams to ensure timely mitigation of critical and high-risk findings.
• Support internal and external penetration testing activities and drive remediation efforts resulting from assessment findings.
• Track risk exceptions and remediation commitments through closure.

• Participate in network security related incident response and post-incident review activities.
• Coordinate Network Security participation in tabletop exercises, cyber resilience testing, and maturity assessments.
• Identify opportunities to improve operational readiness, security posture, and control effectiveness.

• Participate in quarterly Key Risk Indicator (KRI) reviews and risk governance forums.
• Develop reporting and metrics related to control effectiveness, vulnerabilities, risk posture, and remediation progress.
• Identify and implement automation opportunities across security workflows to improve efficiency and response times
• Support continuous improvement initiatives aligned to NIST Cybersecurity Framework (CSF) and CIS Controls.

• 5+ years of experience in Cybersecurity, Risk Management, Governance & Compliance, Security Operations, or Network Security.
• Experience supporting audits, risk assessments, control testing, or compliance programs.
• Experience working with vulnerability management, penetration testing, incident response, or security assurance programs.
• Strong understanding of cybersecurity risk management and control frameworks.
• Excellent communication and stakeholder management skills.
• Ability to drive remediation efforts across multiple teams and technical disciplines.
• Enterprise network security technologies including firewalls, web application firewalls, proxies, remote access, and Zero Trust solutions.

• NIST Cybersecurity Framework (CSF), CIS Critical Security Controls
• Cybersecurity Governance, Risk and Compliance (GRC)
• Control effectiveness assessment and evidence management
• Vulnerability management and remediation programs
• Incident response and operational resilience

• GSEC, CISSP, CRISC, CISA, CGRC

• Serves as the trusted Network Security partner for OR&R, Cyber Risk, Audit, and Vulnerability Management teams.
• Drives successful completion of control assessments and remediation activities.
• Improves visibility into network security risk, compliance, and control effectiveness.
• Advances Network Security program maturity through measurable improvements in governance, resilience, and risk management.

Platinum Resource Group is a professional level consulting firm, providing resources to Fortune 1000 client companies in the areas of…