Senior Risk & Compliance Analyst
$100,000–$150,000 year
On-site · Boston, Massachusetts, United States
Job Summary
Lead cyber and technology risk assessments across systems, cloud environments, and major initiatives, while managing the enterprise cyber risk register and supporting governance processes. This role requires developing dashboards for cybersecurity risks, collaborating with cross-functional teams including Security Architecture and Engineering, and conducting risk assessments for emerging technologies like AI and machine learning. Strong expertise in cybersecurity risk management and communication of technical findings to non-technical stakeholders is essential.
Required Qualifications
- 6+ years of experience in cybersecurity risk management, information security, technology risk, or a related field.
- Demonstrated experience conducting structured cybersecurity or IT risk assessments.
- Experience maintaining risk registers and tracking risk mitigation or treatment activities.
- Strong understanding of security frameworks such as NIST CSF, ISO 27001, or PCI DSS, and familiarity with regulatory environments such as GDPR, HIPAA or other privacy and data protection requirements.
- Ability to translate technical findings into clear business risk for non-technical stakeholders.
- Strong written and verbal communication skills with experience presenting findings to cross-functional teams.
- Professional certifications such as CRISC, CISSP, CISM, CISA, or CGRC are a plus.
Desired Qualifications
- Experience working with engineering, architecture, legal, compliance, and business stakeholders.
- Experience assessing risks related to artificial intelligence, machine learning systems, or emerging technologies, including familiarity with emerging AI governance frameworks such as NIST AI RMF, ISO/IEC 42001.
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.