Junior Security Risk Analyst

Job Description Insight Global is seeking a Junior Security Analyst to join a leading professional services organization supporting its cybersecurity and security risk function. The Junior Security Analyst will partner with Business, Risk, Privacy, and Technology teams to conduct cybersecurity risk assessments and ensure security is incorporated into the design of new business applications, services, and projects. This individual will assess potential threats and risks, review security requirements, and provide practical recommendations that align with organizational security standards, regulatory requirements, and business needs.

The ideal candidate has hands‑on experience with security risk assessments, secure design, threat modeling, security frameworks, and application security testing, combined with the communication skills needed to work with both technical and non‑technical stakeholders.

Responsibilities

Partner with Business and Risk teams to gather information on new projects, applications, services, and technology requirements

Conduct cybersecurity risk assessments and secure design reviews for cloud, on‑premise, and SaaS environments

Review business applications and services to ensure alignment with applicable security standards, policies, and compliance requirements

Identify cybersecurity risks and provide practical security recommendations and remediation guidance

Review application security testing outcomes, including Secure Code Review, DAST, and SAST, and recommend appropriate security actions

Conduct threat‑modeling exercises for new applications, services, and technology solutions

Coordinate with Privacy, Risk, Business, and Technology teams to ensure security requirements and assessments are properly documented

Document and track identified risks and recommendations through Security Assessment Reports (SAR) and Quality Risk Management (QRM) processes

Obtain required NITSO approvals as applicable

Maintain security tracking for critical business projects and initiatives

Clearly communicate identified risks, recommendations, and security requirements to technical teams, business stakeholders, and leadership

Skills and Requirements

2+ years of experience conducting secure design reviews and cybersecurity risk assessments across cloud, on‑premise, and SaaS environments

Strong knowledge of information security frameworks and standards, including CSA CCM, ISO, PCI DSS, NIST CSF, and/or NIST 800-53

Previous cybersecurity experience in a consulting or advisory capacity, working with Technology, Project, Risk, and Business teams

Experience assessing security risks and providing security recommendations based on application security testing, including Secure Code Review, DAST, and SAST

Applied experience conducting threat modeling for new applications, services, or technology solutions

Working knowledge of AI systems and security controls applicable to AI solutions and technologies

Strong ability to identify, document, articulate, and communicate cybersecurity risks and recommendations to both technical teams and business leadership

Experience collaborating with Risk and Privacy teams to ensure security assessments align with compliance and regulatory requirements

Bachelor’s or Master’s degree in Information Technology, Computer Science, a related field, or equivalent relevant professional experience

CISSP, CRISC, ISSAP, CISM, CISA, and/or CCSP certification

Experience performing security assessments within a large enterprise or professional services environment

Experience working with formal security assessment and risk management documentation, including Security Assessment Reports (SAR) and Quality Risk Management (QRM)

Familiarity with security approval and governance processes for enterprise technology initiatives

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to

#J-18808-Ljbffr