Cybersecurity Risk Analyst
$87,000–$104,000 year
Hybrid · Nashville, Tennessee, United States
Job Summary
Hands-on security role within the Information Security group at CAA, focused on delivering end-to-end security services. Responsibilities include conducting vendor, product, and applications security assessments; supporting a technology vendor management program with risk reviews and renewals; coordinating security integrations (SSO, logs, secrets, alerting, threat modeling, backup/recovery) for in-house and SaaS environments; reviewing workflows with business groups to strengthen security processes; and delivering security metrics to show the effectiveness of controls. The role requires collaboration with IRM leadership, familiarity with cloud environments (Azure, AWS), and knowledge of security concepts such as identity management, event management, and continuous improvement of security posture. Location is hybrid with the Nashville office.
Required Qualifications
- A Bachelor’s or Master’s Degree in a relevant field of work
- A minimum of 3-4 years in Information Technology
- A minimum of 2 years’ experience in cybersecurity risk management
- Strong analytical skills in conducting due diligence to identify, assess and prioritize vendor risks
- Familiarity with information security frameworks (NIST, ISO27001) and data privacy regulations (GDPR, CCPA)
- Experience in coordinating technical integrations for security tooling and processes
- Experience producing comprehensive security assessments and security metrics
- Hands-on experience with Azure/AWS Cloud environments and core cloud services
- Knowledge of SSO (e.g., PingFederate, SAML), IAM, SIEM (e.g., Splunk)
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.