So sorry, this position is no longer available.
Please go ahead and submit your application. We may have other positions that would be the perfect fit for you.
Alternatively, you may want to apply to one of the following related jobs:
Cyber Security Risk & Assessment Lead
Posted: 09/11/2026
Job Number: NnU2VXZmYmY1MXpHV0dLd2p5TFNoQT09
Pay Rate: 150000-160000 Yearly USD
Job Description
-
Title: Cyber Security Risk & Assessment Lead
-
Location: Jersey City, NJ
-
Duration: Contract
-
Pay Range: DOE
-
Work Mode: REMOTE
-
Experience: 10–15 Years
We welcome candidates with all U.S. work authorization types, provided they are legally authorized to work in the United States.
Key Responsibilities
-
Conduct Detailed Security Reviews (DSR) across applications, infrastructure, cloud platforms, and operational processes.
-
Identify security risks, vulnerabilities, control gaps, and compliance issues.
-
Perform security-focused architecture and design reviews.
-
Assess customer environments against security standards, policies, and best practices.
-
Facilitate security workshops and stakeholder discussions.
-
Develop security roadmaps and risk mitigation plans.
-
Provide strategic and tactical security recommendations to customer leadership.
-
Advise on security architecture improvements and defense-in-depth strategies.
-
Recommend secure design patterns, governance controls, and operational best practices.
-
Support remediation planning, prioritization, and implementation.
-
Review application security controls including authentication, authorization, encryption, and secrets management.
-
Conduct threat modeling and security design assessments.
-
Evaluate DevSecOps, Secure SDLC, and security testing practices.
-
Assess AWS, Azure, and GCP environments for security posture, governance, monitoring, and compliance.
-
Review container, database, API, and network security controls.
-
Review vulnerability assessment and penetration testing findings and prioritize risks based on business impact and exploitability.
-
Provide remediation guidance and validate closure of identified security issues.
-
Support security governance, compliance reporting, audits, and regulatory requirements.
-
Present security findings and executive summaries to technical and non-technical stakeholders.
-
Drive consensus on remediation priorities and security improvement initiatives.
-
10–15 years of cybersecurity, security assessment, or risk management experience.
-
Strong experience with Detailed Security Reviews (DSR), Risk Assessments, and Security Architecture Reviews.
-
Strong knowledge of Threat Modeling, Vulnerability Management, Security Governance, Compliance, and Security Controls Assessment.
-
Strong Application Security experience covering:
-
Secure SDLC
-
SAST
-
DAST
-
SCA
-
API Security
-
OWASP Top 10
-
Secure Coding Principles
-
Penetration Testing Concepts
-
Secure Code Review
-
-
Experience assessing cloud security across AWS, Azure, and/or GCP.
-
Strong knowledge of IAM, Privileged Access Management, Container Security, Network Security, Data Protection, and Encryption.
-
Experience with Security Monitoring, SIEM concepts, Incident Response, Security Compliance Audits, and Security Policy Reviews.
-
Strong stakeholder management and executive communication skills.
-
Ability to provide security recommendations and remediation advisory to technical and business leadership.
-
Experience with AI Security Architecture.
-
Hands-on experience reviewing, implementing, scanning, and providing remediation guidance for SAST and SCA tools.
-
Experience with IBM Security Verify Governance / IDAM.
-
Experience with OT/ICS Cybersecurity, including threat and vulnerability management.
-
Experience with Risk and Crisis Management.
-
Experience assessing DevSecOps and Secure SDLC implementations.
-
Experience with application security sign-offs and remediation validation.
-
Experience with cloud security governance and compliance frameworks.
-
Experience supporting audit and regulatory requirements.
-
Experience presenting security assessment findings and risk summaries to executive stakeholders.
We are committed to fostering an inclusive workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by applicable law.