Enterprise Security Senior Analyst, Security Partner
Listed on 2026-10-18
-
IT/Tech
Cybersecurity, IT Consultant, Information Security & Data Protection
Enterprise Security is looking for a Senior Analyst to support our Business Information Security Officers (BISOs) in their day-to-day work with Enterprise business unit customers. BISOs drive measurable security improvements and own the health of the relationship between their business units and Enterprise Security. As a Senior Analyst, you work alongside BISOs to keep those engagements running smoothly — tracking risks and commitments, coordinating deliverables, and preparing materials for stakeholder reviews.
This role suits someone building on a solid cybersecurity foundation while working alongside experienced security professionals. You won't make independent architectural or risk-acceptance calls — those sit with the BISOs you support. You will make their work visible, actionable, and well-documented, and own the operational rhythm that keeps the team credible with its business unit customers.
What You'll Actually Be Doing- Maintain an accurate, prioritized risk register for assigned business units, including intake of new findings and status updates
- Track risk buy-down commitments — owners, dates, status — and flag slippage to the responsible BISO
- Prepare recurring stakeholder materials (status decks, dashboards, executive read-outs) under BISO direction
- Coordinate meetings between BISOs, business unit customers, and specialist teams; capture actions and drive follow-up
- You have 3+ years of experience in consulting or a large corporate environment with a complex IT environment
- You have strong understanding of security internal control methodologies and terminology (e.g., COSO, Cybersecurity Framework (CSF))
- You can identify and articulate key security risks and develop controls to mitigate them
- You have experience implementing and testing security controls based on the NIST SP 800-53 standard
- You've designed and implemented internal controls in response to identified risks
- You're experienced with data and reporting tools such as Tableau or Visio
- You hold a CISSP, CISA, PMP, or CISM certification
* LI-Y
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).