[Hiring] Security Risk Analyst @Zoom

Role Description

Zoom is seeking a Security Risk Analyst to join our Security GRC team as we mature the Security Risk Management program and develop new capabilities. In this role, you will assist Security Risk Engineers with identifying, analyzing, monitoring, and reporting security risks using data-driven approaches.

• Support risk assessments
• Manage the security risk register
• Collaborate closely with stakeholder teams

Responsibilities

• Triaging and evaluating security risks in accordance with NIST Risk Management Framework, FAIR, and internally established processes.
• Supporting data collection, modeling, and analysis of security risks using both qualitative and quantitative methods across multiple domains, including:
  • Cloud security
  • Network security
  • Infrastructure security
  • Product security
  • Endpoint security
  • Third-party security
• Collaborating with cross-functional stakeholders in Engineering, Legal, DevOps, IT, and Security in the prioritization and treatment of security risks.
• Guiding the development and documentation of risk treatment plans in line with enterprise risk appetite.
• Monitoring risk mitigation and remediation efforts and reporting on progress.
• Assisting with the administration of the security risk register.

Qualifications

• Demonstrate 2+ years of experience in information security or GRC roles. Risk management experience would be a bonus.
• Have knowledge of standard industry frameworks such as NIST, ISO, COBIT, FAIR, OWASP, MITRE Attack, etc.
• Understand information security principles, cybersecurity technologies and best practices, and GRC processes.
• Communicate complex security risks clearly to technical and non-technical stakeholders.
• Organize and prioritize multiple workstreams in technical environments.
• Collaborate effectively across cross-functional teams.
• Possess professional certifications such as Security+, CRISC, CGRC, or Open FAIR Foundation (a bonus).

Requirements

• Salary Range or On Target Earnings:
  • Minimum: $87,600.00
  • Maximum: $186,000.00
• In addition to the base salary and/or OTE listed, Zoom has a Total Direct Compensation philosophy that takes into consideration base salary, bonus, and equity value.
• Note: Starting pay will be based on a number of factors and commensurate with qualifications & experience.
• We also have a location-based compensation structure; there may be a different range for candidates in this and other locations.

Benefits

• Our benefits program offers a variety of perks, benefits, and options to help employees maintain their physical, mental, emotional, and financial health.
• Support work-life balance and contribute to their community in meaningful ways.

Ways of Working

Our structured hybrid approach is centered around our offices and remote work environments. The work style of each role, Hybrid, Remote, or In-Person is indicated in the job description/posting.