Senior Information Security Risk Analyst

Job Description

Job Description

Senior Information Security Risk Analyst (Contractor)

2 DAYS in Oakland or Sanramon.

Role Summary

We are seeking a Senior Information Security Risk Analyst to support the review, update, and risk assessment of enterprise cybersecurity standards. This role will be central to facilitating cross-functional stakeholder engagement, evaluating technical and operational impact, documenting risk decisions, and guiding standards through the established change management process.

Key Responsibilities

• Facilitate the review of the lifecycle of cybersecurity standards.
• Conduct and document business impact assessments (BIA) for proposed updates to the cybersecurity standards, focusing on operational, compliance, and support implications.
• Partner with SMEs in Cybersecurity, IT, Compliance, and Audit to validate revisions.
• Coordinate and document working sessions, gathering stakeholder feedback and aligning final decisions.
• Draft, edit, and version-control cybersecurity operational and technical standards documentation.
• Maintain clear and audit-ready documentation of change rationale, versioning, and governance approvals.
• Support communication and training coordination planning for standards with operational impact
• Track and report status across multiple concurrent standards updates
• Ensure all work aligns with Cybersecurity Standards Management Platform processes and NIST CSF-aligned control frameworks.

Required Skills & Experience

Ideal Candidate Profile