Senior Enterprise Security Analyst (Security Partner)

• Enterprise Security is looking for a Senior Analyst to support our Business Information Security Officers (BISOs) in their day-to-day work with Enterprise business unit customers. BISOs drive measurable security improvements and own the health of the relationship between their business units and Enterprise Security
• As a Senior Analyst, you work alongside BISOs to keep those engagements running smoothly — tracking risks and commitments, coordinating deliverables, and preparing materials for stakeholder reviews
• This role suits someone building on a solid cybersecurity foundation while working alongside experienced security professionals. You won’t make independent architectural or risk-acceptance calls — those sit with the BISOs you support
• You will make their work visible, actionable, and well-documented, and own the operational rhythm that keeps the team credible with its business unit customers
• Maintain an accurate, prioritized risk register for assigned business units, including intake of new findings and status updates
• Track risk buy-down commitments — owners, dates, status — and flag slippage to the responsible BISO
• Prepare recurring stakeholder materials (status decks, dashboards, executive read-outs) under BISO direction
• Coordinate meetings between BISOs, business unit customers, and specialist teams; capture actions and drive follow-up

Benefits

• Medical Care
• Life Insurance
• Retirement Savings
• Employee Assistance Programs
• With 9 standard holidays and four floating holidays, you get a total 13 paid days off each year- You have 3+ years of experience in consulting or a large corporate environment with a complex IT environment
• You have experience implementing and testing security controls based on the NIST SP 800-53 standard
• You have strong understanding of security internal control methodologies and terminology (e.g., COSO, Cybersecurity Framework (CSF))
• You can identify and articulate key security risks and develop controls to mitigate them
• You’re experienced with data and reporting tools such as Tableau or Visio
• You’ve designed and implemented internal controls in response to identified risks
• You hold a CISSP, CISA, PMP, or CISM certification