Senior IS Security Risk Analyst – US Citizenship Required

Senior IS Security Risk Analyst – US Citizenship Required

Location: Columbia, South Carolina (Hybrid – Partial Onsite)

Schedule: Monday–Friday, 8:00 AM – 5:00 PM

Team: Strategic Security & Compliance Services

Employment Type: Full-Time

Position Summary

The Senior IS Security Risk Analyst is responsible for leading enterprise information security risk and compliance initiatives, ensuring alignment with regulatory requirements, contractual obligations, and organizational security standards. This role serves as a strategic advisor to business and technology teams, driving risk management activities, strengthening governance practices, and promoting a culture of security and compliance across the organization.

The ideal candidate combines strong technical security knowledge, regulatory compliance expertise, and the ability to influence stakeholders across multiple business areas.

Key Responsibilities

• Develop strategies supporting business initiatives and proposals within a systems security and compliance framework.
• Plan, coordinate, and execute information security compliance and risk management activities aligned with organizational and contractual requirements.
• Monitor, track, and oversee remediation of information security risks and exceptions across multiple business units and security frameworks.
• Conduct enterprise risk assessments and evaluate the effectiveness of security controls.
• Lead procedural and operational reviews of internal information security compliance standards.
• Develop action plans to address identified risks and drive continuous improvement in security and compliance processes.
• Lead the development, implementation, and maintenance of information security policies, standards, procedures, and governance programs.
• Interpret security regulations, control frameworks, and contractual obligations, providing expert consultation to business and technical teams.
• Serve as a primary liaison for governance reviews, audits, and external compliance engagements.
• Investigate and support resolution of information security incidents and communicate critical risks to senior leadership.
• Research emerging threats, regulatory changes, and security best practices to enhance organizational security posture.
• Promote enterprise security awareness through training programs, communications, and security governance initiatives.
• Facilitate meetings, deliver presentations, and provide executive-level reporting on risk and compliance activities.

Required Skills & Competencies

• Deep understanding of information security lifecycle methodologies and risk management practices.
• Expertise working within government and private-sector security frameworks and control implementations.
• Strong knowledge of security governance, risk assessment, and compliance operations.
• Ability to interpret and apply regulatory and accreditation requirements.
• Experience influencing organizational change and promoting a security-focused culture.
• Understanding of infrastructure and network architectures including WAN, LAN, internet, intranet, and communication protocols.
• Strong analytical, problem-solving, and decision-making skills.
• Excellent written and verbal communication skills with experience presenting to senior leadership.
• Demonstrated ability to develop metrics, perform analysis, and produce executive decision-support reporting.
• Proven collaboration skills working across matrixed organizations.

Required Technologies

Microsoft 365 (Intermediate):

• Outlook
• Teams
• Excel
• Word
• Lists
• PowerPoint
• SharePoint

Preferred Tools:

• Microsoft Visio
• Planner
• Forms
• Power BI
• Power Automate
• RSA Archer
• ServiceNow

Education & Experience

Required Education

• Bachelor’s degree in Computer Science, Information Technology, or related field
• OR
• Equivalent combination of education and relevant work experience.

Required Experience

• Minimum 8 years of IT experience
• At least 6 years focused on IT security, risk assessment, governance, or compliance

Preferred Certifications

• ISC² Certified Information Systems Security Professional (CISSP) preferred

Work Environment

• Hybrid schedule with onsite presence required Tuesday through Thursday.
• Additional onsite participation may be required for training or critical meetings.
• Candidates must successfully complete eligibility screening and credit check requirements.

Equal Opportunity Employer

We are an Equal Opportunity Employer committed to fostering an inclusive workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability status, veteran status, or any other characteristic protected by applicable law.