Senior Cyber Risk Analyst

Vantor is forging the new frontier of spatial intelligence, helping decision makers and operators navigate what’s happening now and shape what’s coming next.  Vantor is a place for problem solvers, changemakers, and go-getters—where people are working together to help our customers see the world differently, and in doing so, be seen differently. Come be part of a mission, not just a job, where you can: Shape your own future, build the next big thing, and change the world.

To be eligible for this position, you must be a U.S. Person, defined as a U.S. citizen, permanent resident, Asylee, or Refugee.

Export Control/ITAR: Certain roles may be subject to U.S. export control laws, requiring U.S. person status as defined by 8 U.S.C. 1324b(a)(3).

Please review the job details below.

Vantor is hiring for a Senior Cyber Risk Analyst to join our team in Westminster, CO.

Primary Duties and Responsibilities:

• Ability to perform an Enterprise Cyber Security Risk program that is aligned to key industry standards to simplify, scale, and enable Vantor’s key business priorities.
• Function as an advanced cyber risk specialist with the ability to run cyber risk assessments, software scans, third-party risk assessments, user and privilege access reviews, and all other risk related activities.
• Execute an ongoing governance, change management, and stakeholder engagement process through the development and implementation of internal standards and procedures.
• Proactively report on the organization’s cyber risk posture and identify the behavior changes required to mitigate those risks.
• Manage external/internal audit and risk programs for multiple regulatory frameworks.
• Prepare and provide cyber risk status snapshots and trend analysis. Consolidate ongoing operational activities in a daily status briefing including cause, fix, impact, and prevention recommendations.
  

Minimum Requirements:

• Must be a U.S. Citizen
• Must be located near Westminster, CO in the Denver Metro area
• Must be able and willing to be in the office three days per week, Tuesday, Wednesday and Thursday and work remotely on Mondays and Fridays
• Requires 3 plus years of relevant experience
• Requires one of the following certifications: CISA, CISM, CRISC or equivalent security risk management/project management certification

Preferred Qualifications:

• Bachelor's degree is preferred, with a focus on IT- or IT-risk-related disciplines (for example, security, privacy, business continuity management and compliance)
• Ability to gather, analyze, and interpret business drivers to develop pragmatic security solutions that provide effective security solutions to support the business.
• Ability to work collaboratively with technical subject matter experts.
• Strong interpersonal skills necessary to consult with senior management, identify deficiencies, and recommend policy and process solutions.
• Highly organized with demonstrated ability to manage time and perform multiple tasks simultaneously, affording top priority to business-critical issues.
• Basic knowledge of a broad range of standards and frameworks — including, but not limited to, International Standards Organization (ISO) 27001, GDPR IT Infrastructure Library, Capability Maturity Model Integration, NISPOM, ICD 503, NIST 800-53, NIST 800-171 and related U.S. Government standards and requirements.
• Demonstrated ability to identify and pursue automation opportunities to streamline security controls for compliance and risk management across all functional groups.
• Demonstrated experience in guiding teams or individuals to strengthen their implementation and effectiveness of the security controls in a very fast paced, complex, and demanding environment.
• Demonstrated expertise in implementing compliance-related security solutions in a forward-thinking and user-focused manner.
• Excellent written and verbal communication skills — including the ability to effectively communicate security- and risk-related concepts to technical and nontechnical audiences.
• Strong skills as a negotiator, to facilitate commitment to, and sign-off on, appropriate levels of residual risk from line-of-business managers.
• High level of personal integrity, with the ability to handle confidential and otherwise sensitive matters professionally and with the appropriate level of judgment and maturity.

#LI-MG1

Pay Transparency: To support pay transparency, Vantor includes salary ranges in all U.S. job postings. Starting pay for this role will fall within the listed range and will be based on factors such as experience, qualifications, skills, location, and market conditions. Candidates who meet the minimum requirements for the role should not expect to receive compensation at the top of the range. The listed range reflects the expected pay for this position, and final offers will be determined based on each candidate’s experience, expertise, and alignment with the role.

● The base pay for this position within Colorado is: $105,000.00 - $140,000.00 - $154,000.00 annually. ● The base pay for this position within the Washington, DC metropolitan area is: $116,000.00 - $154,000.00 - $169,400.00 annually.

For all other states, we use geographic cost of labor as an input to develop market-driven ranges for our roles, and as such, each location where we hire may have a different range.

Benefits: Vantor offers a competitive total rewards package that goes beyond the standard, including a robust 401(k) with company match, mental health resources, and unique perks like student loan repayment assistance, adoption reimbursement and pet insurance to support all aspects of your life. You can find more information on our benefits at: https://www.Vantor.com/careers

Additionally, this position is incentive eligible with a target based on contribution, company performance, and/or individual results achieved; the specific incentive plan and target amount will be determined based on the role and breadth of contributions.

The application window is three days from the date the job is posted and will remain posted until a qualified candidate has been identified for hire.  If the job is reposted regardless of reason, it will remain posted three days from the date the job is reposted and will remain reposted until a qualified candidate has been identified for hire. 

The date of posting can be found on Vantor's Career page at the top of each job posting.

To apply, submit your application via Vantor's Career page.

EEO Policy: Vantor is an equal opportunity employer committed to an inclusive workplace. We believe in fostering an environment where all team members feel respected, valued, and encouraged to share their ideas. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, gender identity, sexual orientation, disability, protected veteran status, age, or any other characteristic protected by law.