Principal Security Analyst | Security Analyst

Job Description

Who We Are

In today's work environment, employees use a myriad of devices to access IT applications and data over multiple networks to stay productive, wherever and however they work. Ivanti elevates and secures Everywhere Work so that people and organizations can thrive.

While our headquarters is in the U.S., half of our employees and customers are outside the country. We have 36 offices in 23 nations, with significant offices in London, Frankfurt, Paris, Sydney, Shanghai, Singapore, and other major cities around the world.

Ivanti's mission is to be a global technology leader enabling organizations to elevate Everywhere Work, automating tasks that discover, manage, secure, and service all their IT assets. Through diverse and inclusive hiring, decision-making, and commitment to our employees and partners, we will continue to build and deliver world‑class solutions for our customers.

At Ivanti, our success begins with our people. This is why we embrace Everywhere Work across the globe, where Ivantians and our customers are thriving. We believe in a healthy work‑life blend and act on it by fostering a culture where all perspectives are heard, respected, and valued. Through Ivanti's Centered Around You approach, our employees benefit from programs focused on their professional development and career growth.

We align through our core values by locking arms in collaboration, being champions for our customers, focusing on the outcomes that matter most and fighting the good fight against cyber‑attacks. Are you ready to join us on the journey to elevate Everywhere Work?

Are you a talented risk analyst looking for a large‑scale challenge? Join Ivanti as a Lead/Staff Risk Analyst. We are seeking either an experienced Principal or an experienced Lead/Staff analyst for this role. Will have an opportunity to shape and improve our risk management program by identifying, assessing, and quantifying risks for our leadership team, expressing risk as percentage probability of specific dollars lost.

Will be leading the execution of large‑scale Annual Assessments, Business Impact Analyses as well as Product Risk Analyses and assessing risks for factor analysis. Will make risk central to decision‑making by engaging with stakeholders while providing guidance for our other analysts. We're seeking someone with expertise in information risk
management and system risk managementanalysis to advance our risk analysis process, and help create the risk environment.

• Promote, educate and present Security, Risk and Issue information to key stakeholders and the business in all departments to ensure sound risk principles and how they are applied are represented.
• Maintain the risk artifacts (register, acceptances/exceptions, vendor onboarding and vendor risk profiles, evaluation SBAR, reports, metrics).
• Execute Corporate, Product, Business Impact and Emerging Tech risk assessments, some as large‑scale projects to include interviews, data collection, parsing and analysis, and modeling.
• Integrate with partners in Security, Audit and Compliance, Procurement and Legal by understanding the frameworks and vocabularies they are using.
• Using deep experience, develop and/or execute logical risk, threat and/or probability models whether automated or manually run.
• Develop and maintain human networks including major stakeholders to propagate risk program support;
  Socialize challenging or counter intuitive future insights into likely risk events to create general risk awareness and thoughtfulness.
• Work with total honesty and integrity, declaring errors and proposing fixes immediately, recognizing escalation‑worthy information and escalating appropriately, providing confidence levels as appropriate in results.
• Be prepared to build things brand new to the organization, whether a special purpose model or new nascent program processes to fill a gap.

• Minimum 8 years Security Risk Management
• Preferred 12 years of Security Risk
  Management (as distinct from Compliance, Audit, Governance, Vulnerability Management, or Third‑Party Risk).
• Imaginatio…