Technical Risk Management - Risk Engineer - Req

We're looking for a curious and motivated cybersecurity professional to join COCC's Technical Risk Management team. Technical Risk Management helps the organization make informed decisions about technology by evaluating security risks, reviewing controls, assessing vendors, and providing practical recommendations that enable the business to move forward securely. In this role, you'll work with a wide range of technologies including cloud services, applications, infrastructure, third-party solutions, and security tools while helping assess risk and support business innovation.

You'll be part of a collaborative team that partners across the organization to solve problems, improve security, and continuously learn. This is an excellent opportunity to gain broad exposure to cybersecurity, technology risk, and regulatory requirements while building a well-rounded career.

COCC offers a collaborative environment, career growth, and all the benefits you’d expect from an award-winning employer, including:

• Health Insurance: Employees and their eligible dependents – including spouses, domestic partners, and children – are eligible for coverage from the first day of the month following hire, including medical, dental, and vision insurance, as well as ancillary benefits. COCC also contributes to employees’ health savings accounts (HSA).
• Retirement: COCC matches 100% for the first 3% and 50% for the next 2% that employees contribute to their 401(k). Additionally, COCC may make a discretionary annual contribution to the plan based upon the profitability of the company.
• Paid Time Off: COCC offers a generous PTO policy, including quarterly wellness days, paid holidays, and a birthday day off.
• Hybrid
  
  Schedule:
  
  Enjoy the flexibility of a hybrid work schedule designed to support work-life balance and personal well-being
• Training & Development: COCC offers robust employee development programs aligned with career pathing objectives, including cutting edge training and educational resources, as well as a tuition reimbursement program to support continued education.
• Recognition Programs: Be recognized and celebrated through employee appreciation and peer recognition programs.
• On-site Fitness Centers: Stay active and energized with convenient on-site fitness centers available to employees.
• Fuel Up: Monthly company-sponsored lunches discounted catered meals, and convenient on-site snacks.
• Additional Benefits: COCC offers employees a Lifestyle Spending Account (LSA) to support employees’ unique needs, as well as company-paid life insurance, wellness initiatives, and access to financial planning guidance from certified professionals.

To learn more about our comprehensive benefit programs, please visit:

• Perform technical risk and control assessments for software, SaaS platforms, code packages, container images, external network connections, security exceptions, and contractor or vendor remote access requests.
• Support vulnerability, exposure, and recurring control reviews by validating findings, reviewing remediation evidence, tracking commitments, and documenting results for technology and physical security controls.
• Conduct technical reviews of third-party vendors by evaluating security questionnaires, penetration test results, assurance reports, certifications, architecture, and data handling practices.
• Support audits, regulatory examinations, client inquiries, and management reviews by gathering evidence, preparing responses, maintaining records, and tracking findings, risk acceptances, and remediation commitments.
• Identify opportunities to improve TRM processes, documentation, automation, reporting, and workload efficiency.

• Strong written and verbal…