Job Description Insight Global is seeking a Junior Security Analyst to join a leading professional services organization supporting its cybersecurity and security risk function.
The Junior Security Analyst will partner with Business, Risk, Privacy, and Technology teams to conduct cybersecurity risk assessments and ensure security is incorporated into the design of new business applications, services, and projects. This individual will assess potential threats and risks, review security requirements, and provide practical recommendations that align with organizational security standards, regulatory requirements, and business needs.
The ideal candidate has hands-on experience with security risk assessments, secure design, threat modeling, security frameworks, and application security testing, combined with the communication skills needed to work with both technical and non-technical stakeholders.
Responsibilities
- Partner with Business and Risk teams to gather information on new projects, applications, services, and technology requirements
- Conduct cybersecurity risk assessments and secure design reviews for cloud, on-premise, and SaaS environments
- Review business applications and services to ensure alignment with applicable security standards, policies, and compliance requirements
- Identify cybersecurity risks and provide practical security recommendations and remediation guidance
- Review application security testing outcomes, including Secure Code Review, DAST, and SAST, and recommend appropriate security actions
- Conduct threat-modeling exercises for new applications, services, and technology solutions
- Coordinate with Privacy, Risk, Business,



and Technology teams to ensure security requirements and assessments are properly documented
- Document and track identified risks and recommendations through Security Assessment Reports (SAR) and Quality Risk Management (QRM) processes
- Obtain required NITSO approvals as applicable
- Maintain security tracking for critical business projects and initiatives
Clearly communicate identified risks, recommendations, and security requirements to technical teams, business stakeholders, and leadership Skills and Requirements - 2+ years of experience conducting secure design reviews and cybersecurity risk assessments across cloud, on-premise, and SaaS environments
- Strong knowledge of information security frameworks and standards, including CSA CCM, ISO, PCI DSS, NIST CSF, and/or NIST 800-53
- Previous cybersecurity experience in a consulting or advisory capacity, working with Technology, Project, Risk, and Business teams
- Experience assessing security risks and providing security recommendations based on application security testing, including Secure Code Review, DAST, and SAST
- Applied experience conducting threat modeling for new applications, services, or technology solutions
- Working knowledge of AI systems and security controls applicable to AI solutions and technologies
- Strong ability to identify, document, articulate,



and communicate cybersecurity risks and recommendations to both technical teams and business leadership
- Experience collaborating with Risk and Privacy teams to ensure security assessments align with compliance and regulatory requirements
Bachelor's or Master's degree in Information Technology, Computer Science, a related field, or equivalent relevant professional experience
- CISSP, CRISC, ISSAP, CISM, CISA, and/or CCSP certification
- Experience performing security assessments within a large enterprise or skilled services environment
- Experience working with formal security assessment and risk management documentation, including Security Assessment Reports (SAR) and Quality Risk Management (QRM)
Familiarity with security approval and governance processes for enterprise technology initiatives We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].

📌 Junior Security Risk Analyst (Concord)
🏢 Insight Global
📍 Concord