Senior Analyst, Security Risk (Cybersecurity)

TL;DR

Senior Analyst, Security Risk (Cybersecurity): Maturing security risk posture by facilitating risk identification and treatment across Product and Engineering teams with an accent on operational effectiveness and regulatory compliance. Focus on executing automated risk operations, managing risk registers, and translating technical vulnerabilities into measurable business impact.

Location: Remote (US). Not eligible to be hired in CA, CT, NJ, NY, PA, WA.

Salary: $128,560 - $188,900 (varies by location)

Company

A global communications platform empowering businesses and developers to craft personalized customer experiences via cloud-based APIs.

What you will do

• Execute and improve daily operations of the One Twilio Risk Management program, focusing on automating cyber risk operations.
• Manage risk registers to track key risk indicators (KRIs) and ensure timely mitigation of identified risks.
• Collaborate with cross-functional Product and Engineering teams to make risks actionable and well-communicated.
• Analyze risk data and develop predictive models to assess legal, financial, operational, and security impacts.
• Prepare and deliver risk reports, dashboards, and presentations for internal and external stakeholders.
• Coordinate with internal and external auditors to support compliance assessments and resolve findings.

Requirements

• 5+ years of experience in security-centric risk management and compliance frameworks.
• Expertise in maturing industry-accepted frameworks such as NIST RMF, COSO, or ISO 31000.
• Experience in qualitative and quantitative risk analysis to translate technical vulnerabilities into business impact.
• Proven track record of managing large-scale, regulated, multi-entity risk assessments and compliance programs.
• Ability to translate control requirements into actionable statements for technical security and engineering stakeholders.
• Must be based in the US (excluding CA, CT, NJ, NY, PA, WA).

Nice to have

• Bachelor’s degree in Risk Management, Cybersecurity, Finance, or Business.
• Professional certifications such as CRISC, CISA, CISSP, or FRM.
• Strong proficiency with enterprise AI and GRC tooling.
• Experience with project management across multiple departments.

Culture & Benefits

• Remote-first work environment with a strong culture of connection and global inclusion.
• Competitive pay, equity plan eligibility, and corporate bonus opportunities.
• Comprehensive health care insurance and a 401(k) retirement account.
• Generous paid time off, including sick leave, personal time, and parental leave.
• Focus on professional growth and volunteering opportunities through Twilio Magic values.