[Hiring] Senior Analyst, Digital Security @Waste Management, Inc. (WM)

Role Description

WM is expanding its security exposure management capability through a dedicated Security Exposure Operations function responsible for turning security findings into consistent, measurable outcomes. The Senior Analyst, Security Exposure Operations will drive security findings from investigation and prioritization through ownership, disposition, and verified resolution. The role will serve as a senior operational resource within the team, applying risk, criticality, threat context, and business impact to determine appropriate action. The Senior Analyst will partner across Cybersecurity, Information Technology, and the business to resolve complex or significant findings, maintain accountability, improve operational processes, and leverage automation and AI to increase the efficiency and scale of security exposure operations.

Essential Duties and Responsibilities

• Investigate and prioritize security findings based on criticality, threat intelligence, exploitability, business impact, and existing controls.
• Drive findings through ownership, remediation, risk acceptance, exception, or other appropriate disposition to verified closure.
• Coordinate with Cybersecurity, IT, application, infrastructure, and business teams to resolve findings and escalate significant, overdue, disputed, or unowned issues.
• Validate remediation and supporting evidence before findings are closed.
• Monitor aging, response targets, backlog health, and recurring exposures to identify systemic issues requiring corrective action.
• Establish and continuously improve standards for investigation, prioritization, disposition, escalation, documentation, and closure.
• Develop reporting and operational insights on risk, exposure trends, remediation progress, and emerging concerns.
• Automate repetitive processes using AI, scripting, and workflow orchestration to improve investigation, routing, tracking, and reporting.
• Integrate new exposure sources, security tools, and processes into Security Exposure Operations.

Qualifications

• Bachelor's Degree in Computer Science, MIS, Business Administration or similar area of study.
• An additional four years of related experience may substitute for the Bachelor’s degree and 5 years of previous experience or:
• Certified Information Systems Security Professional (CISSP) within 1 Year.
• Certified Information Systems Auditor (CISA) within 1 Year.
• Certified Information Security Manager (CISM) within 1 Year.
• Strong knowledge of cybersecurity risk and of vulnerability and exposure management principles.
• Broad understanding of enterprise technology, including endpoints, servers, networks, cloud, applications, and identity.
• Clear, concise written communication that holds up under audit and leadership review.
• Ability to influence and drive accountability without direct authority.
• Self-directed, with the ability to manage multiple priorities at once.

Physical Requirements

• Repetitive Motions.
• Eye/Hand/Foot Coordination.
• Sitting.
• Talking.
• Hearing.

Pay

The expected base pay range for this position across the U.S. is $101,000 - $140,000. This range represents a good faith estimate for this position. The specific salary offered to a successful candidate may be influenced by a variety of factors including the candidate’s relevant experience, education, training, certifications, qualifications, and work location.

Benefits

• Competitive total compensation package that includes medical, dental, vision, life insurance, and short-term disability.
• Stock purchase plan.
• Company matching on a 401(k).
• Paid vacation, holidays, and personal days.
• Benefits may vary by site.