Cybersecurity Risk Assessment

Cybersecurity Risk Assessment Jobs

2 jobs found

Today

Senior Analyst, Cybersecurity

LPL Financial Fort Mill, SC

Fort Mill, SC

Today

$93k - $155k/yr Full time Senior Cybersecurity Operations Cybersecurity Risk Assessment

Apply Now

Job Description

LPL Financial is seeking a Senior Analyst, Cybersecurity to support cybersecurity engagement work that strengthens advisor protection, reduces risk, and improves cybersecurity maturity across the advisor population. In this Fort Mill, SC (hybrid) role, you will provide escalation support, lead risk assessment activities, and help shape incident response guidance in collaboration with Cybersecurity, Technology, Compliance, and other stakeholders.

What you’ll do

Act as an escalation point for complex advisor cybersecurity inquiries, incidents, and risk-related concerns.
Respond to advisor cybersecurity questions via shared mailboxes, inbound calls, and executive-level interactions.
Perform detailed risk assessments and deliver actionable recommendations to help advisors mitigate cybersecurity threats.
Make outbound calls to advisors to facilitate incident response, remediation activity, and information gathering for escalated investigations.
Build trusted relationships with advisors and business partners to proactively drive cybersecurity awareness and risk reduction.
Lead cybersecurity awareness initiatives, campaigns, and outreach programs aimed at improving cybersecurity maturity across the advisor population.
Identify emerging cybersecurity threats, industry trends, and advisor risk patterns, then recommend proactive mitigation strategies.
Lead cross-functional projects involving Cybersecurity, Technology, Legal, Compliance, and Operations teams.
Support strategic planning to enhance advisor cybersecurity services, processes, and tools.
Analyze operational metrics and trends to recommend improvements in service delivery and cybersecurity effectiveness.
Develop, create, review, evaluate, and continuously improve cybersecurity training materials, presentations, communications, and awareness content.
Facilitate instructor-led training sessions, webinars, workshops, and presentations for advisors, clients, and internal stakeholders.
Ensure educational content stays aligned with evolving cybersecurity threats, regulatory requirements, and organizational policies.
Serve as a subject matter expert for advisor cybersecurity education and awareness programs.
Coordinate advisor-related cybersecurity incident response activities and support investigations involving phishing, account compromise, malware, and other cyber threats.
Collaborate with Cybersecurity teams to identify root causes, assess impacts, and create remediation guidance.
Evaluate security trends, incident data, and threat intelligence to identify systemic risks and improvement opportunities.
Assist in developing and maintaining advisor-focused security controls, standards, and best practices.
Drive continuous improvement by reviewing and optimizing workflows, procedures, and service models.
Create, maintain, and govern standard operating procedures, playbooks, and knowledge management documentation.
Recommend enhancements to cybersecurity tools, processes, reporting capabilities, and advisor-facing services.
Support audits, compliance reviews, and risk assessments as needed.
Provide mentoring, guidance, and knowledge sharing to Analyst I and Analyst II team members.
Assist management with onboarding, training, and development for new team members.
Lead team projects and workstreams while promoting collaboration and operational excellence.
Operate as a recognized subject matter expert within the Advisor Security organization.

Requirements

Bachelor’s degree in Information Security, Cybersecurity, Business, Technology, or related field.
3+ years of experience in cybersecurity, information security, or cyber incident response.
Experience managing cybersecurity incidents, investigations, and remediation efforts.
Strong understanding of multiple information security domains: Identity and Access Management (IAM); Multi-Factor Authentication (MFA); Network Security; Security Awareness and Training; Data Protection and Encryption; Threat Intelligence; Risk Management and Regulatory Compliance.
Familiarity with phishing simulation platforms, endpoint security technologies, and cybersecurity monitoring tools.

Technologies

Identity and Access Management (IAM)
Multi-Factor Authentication (MFA)
Phishing simulation platforms
Endpoint security technologies
Cybersecurity monitoring tools

Compensation

USD 92,906 - 154,809 per year.

Benefits

401K matching
Health benefits
Employee stock options
Paid time off
Volunteer time off

Certifications and preferences

Security+ (preferred)
CISSP (or pursuing)
CISM
GIAC certifications
Certified Cybersecurity Practitioner (CC)

Work authorization

This position does not offer work authorization sponsorship now or in the future.
Applicants must have valid U.S. work authorization that does not require employer sponsorship.

Interview process

LPL will only communicate with a job applicant directly from an @lplfinancial.com email address.
LPL will never conduct an interview online or in a chatroom forum.
During an interview, LPL will not request any form of payment or information regarding an applicant’s bank or credit card.
Questions about the application process can be directed to LPL’s Human Resources Solutions Center at (855) 575-6947.

View full job page →

Today

IT Audit Manager, Corporate Technology & Cybersecurity

First American Title Insurance Co Santa Ana, CA

Santa Ana, CA

Today

$129k - $172k/yr Full time Manager Audit Management Cloud Platforms

Apply Now

Job Description

The IT Audit Manager for Corporate Technology and Cybersecurity leads complex, risk-based technology and cybersecurity audit engagements from annual planning through final reporting. This role serves as a senior audit point of contact for client leadership and communicates findings and conclusions to senior management, internal stakeholders, and examination audiences.

Key Responsibilities

Lead executive-level discussions with technology, security, risk, finance, and business leaders, including the CTO, CISO, CRO, and their direct reports.
Set expectations, resolve disagreements constructively, and communicate significant risks and audit conclusions.
Define audit objectives, risk assessment approach, scope, criteria, resource plan, and timing.
Test scope coverage against the audit universe, enterprise architecture, regulations, prior findings, emerging technology, and related dependencies to support complete coverage and defensible exclusions.
Direct audits across technology and cybersecurity programs included within the audit profile.
Apply deep technical audit judgment or coordinate qualified subject-matter expertise when specialized areas require additional support.
Ensure audit scope evaluates security-asset configuration and operating effectiveness across baselines and rules/settings, privileged access, logging and monitoring, encryption, certificate lifecycle, changes, and exceptions.
Direct and challenge configuration-focused audit coverage for assigned specialties, including identity and privileged access, network security and segmentation, cloud security architecture and WAF, Security Operations monitoring and response, vulnerability management, and data-protection controls such as DLP, encryption, and key management.
Oversee audit planning and execution by reviewing plans, walkthroughs, sampling, procedures, evidence, workpapers, issue evaluations, and reporting for quality and supportability.
Own engagement decisions, issue severity and root cause assessments, action plans, and resulting reports.
Escalate promptly and resolve differences while preserving Internal Audit independence.
Present audit plans, status, results, and significant risks to Internal Audit leadership, executives, regulators, and examiners, including ensuring examination materials are complete and supportable.
Coordinate with assurance teams and external auditors on reliance while protecting Internal Audit scope and conclusions.
Coach auditors, build technical capability, manage concurrent-project resourcing and deadlines, and improve audit methods, continuous auditing, and analytics.

Required Qualifications

At least 8 years of relevant experience, including leading complex IT or cybersecurity audits and advising on technology risks and controls.
Experience leading operational cybersecurity or data-risk audits.
Demonstrated experience managing teams and engaging senior client leadership.
Extensive IT/cybersecurity audit leadership across one or more domains, including: Cyber Threat Intelligence (CTI)/threat hunting; Security Operations/incident response; endpoint/network security; data security/protection/privacy; insider risk/digital forensics; Offensive Security/penetration testing/application security; vulnerability/patch management; identity and access management; cloud security/service management (AWS, Microsoft Azure, Google Cloud Platform); PKI/certificate management; or network/technology.
Ability to assess scope completeness and direct related work.
Hands-on security-configuration audit experience with firewalls, SIEM, cloud security, WAF, encryption, or certificates.
Primary leadership depth in at least one complementary area: (1) IAM/PAM and identity architecture including CyberArk and Active Directory; network security including firewalls and segmentation; or cloud security architecture and WAF; or (2) Security Operations including monitoring and incident response; vulnerability management; or Data Protection including DLP, encryption, key management, and data controls.
Experience with comparable tools is acceptable.
Familiarity with official security guidance for Microsoft Azure, AWS, and Google Cloud, including Azure network security best practices, the AWS Well-Architected Security Pillar, and Google Cloud Well-Architected security guidance.
Ability to apply relevant guidance when evaluating audit scope, architecture, control design, and operating effectiveness.
Advanced understanding of risk assessment, internal control design and operating effectiveness, audit evidence, sampling, issue development, and accepted internal audit standards.
Strong executive presence, negotiation, writing, presentation, and relationship-building skills, with sound judgment in sensitive or high-pressure discussions.

Technical and Tooling Exposure

CyberArk, Active Directory
SIEM, WAF
AWS, Microsoft Azure, Google Cloud Platform
Cyber Threat Intelligence (CTI)
Power BI, ServiceNow, Jira
SailPoint, AuditBoard
DLP
PKI/certificate management
Azure Well-Architected security guidance, AWS Well-Architected Security Pillar, Google Cloud Well-Architected security guidance

Preferred Qualifications

CISA or equivalent (CISM, CISSP, CRISC, CIPP/US) strongly preferred.
Banking IT audit and regulatory examination experience preferred.
Relevant IT or cybersecurity coursework, professional training, or hands-on experience valued.
Familiarity with AuditBoard, Power BI, ServiceNow, Jira, or SailPoint helpful.

Location and Work Model

Santa Ana, CA (hybrid)

Compensation

USD 129,300 - 172,300 per year

Benefits

Medical, dental, vision
401k
PTO/paid sick leave
Employee stock purchase plan

View full job page →

Cybersecurity Risk Assessment Jobs

Senior Analyst, Cybersecurity

IT Audit Manager, Corporate Technology & Cybersecurity

Get Cybersecurity Risk Assessment Jobs alerts