Risk Analyst

About AscendionAscendion is a full-service digital engineering solutions company. We make and manage software platforms and products that power growth and deliver captivating experiences to consumers and employees. Our engineering, cloud, data, experience design, and talent solution capabilities accelerate transformation and impact for enterprise clients. Headquartered in New Jersey, our workforce of 6,000+ Ascenders delivers solutions from around the globe. Ascendion is built differently to engineer the next. Ascendion. Ascendion | Engineering to elevate lifeWe have a culture built on opportunity, inclusion, and a spirit of partnership. Come, change the world with us:Build the coolest tech for world’s leading brandsSolve complex problems – and learn new skillsExperience the power of transforming digital engineering for Fortune 500 clientsMaster your craft with leading training programs and hands-on experienceExperience a community of change makers!Join a culture of high-performing innovators with endless ideas and a passion for tech. Our culture is the fabric of our company, and it is what makes us unique and diverse. The way we share ideas, learning, experiences, successes, and joy allows everyone to be their best at Ascendion.

• ** About the Role ***

Job Title: Information Security Risk Analyst

Key Responsibilities:Conduct ongoing enterprise-wide risk analysis aligned with compliance and security. Manage GRC oversight efficiently on a dedicated platform. Assess and optimize the GRC program for privacy, security, and compliance. Develop and enforce security improvements that align risk and business efficiency. Ensure robust oversight of third parties and vendors; report weaknesses to GRC leadership. Analyze and report program gaps to GRC leadership. Stay updated on security changes and apply GRC expertise across business lines. Establish metrics to gauge GRC program success and report to leadership regularly. Ensure up-to-date system and process configuration documentation. Play a pivotal role in incident response, documenting and reporting all steps. Collaborate with security and risk management for ongoing assessments and annual planning. Participate actively in change and project management meetings. Coordinate with internal and external auditors for compliance and privacy controls. Serve as a key contact for disaster recovery and business continuity in security and compliance.

Minimum Qualifications:Bachelor's in Business, Accounting, Management Information Systems, or Computer Science. Advanced degrees in Business or related fields are a plus.5+ years in cybersecurity, with 2-3+ years in security frameworks. Background in tech risk, security, or compliance, ideally in finance. Proficiency in risk management, ISO 27001/2, NIST, and other security standards. Familiarity with regulations like PCI, SOX, HIPAA, HITRUST, GDPR, and GLBA.Experience liaising between business and tech teams. Certifications like CISSP, CRISC, CISA, CIPP, CISM are advantageous.

Desired Qualifications :Any Certifications related to the role.

Location: This is hybrid Role (Sacramento, CA)

Salary Range: The salary for this position is between $60000 – $70000 annually. Factors which may affect pay within this range may include geography/market, skills, education, experience, and other qualifications of the successful candidate.

Want to change the world? Let us know. Tell us about your experiences, education, and ambitions. Bring your knowledge, unique viewpoint, and creativity to the table. Let’s talk!