Azure Cloud Security Risk Specialist – ITmPowered The Azure Cloud Security Risk Specialist will have 1 to 2 years’ experience in Microsoft Azure and Container Security. Be responsible for establishing, designing, and running the cloud risk governance processes to drive remediation of the Container vulnerabilities from TwistLock and Microsoft Azure Policy violation vulnerabilities. The resource will have frequent meetings with the key stakeholders, Container Security, Application Security and Cloud Security teams to review requirements to map and design process workflows from identification of security risk to remediation to Risk Management. Conduct check in meetings with the Application project team and Cloud Platform team to ensure the security vulnerabilities are being remediated. Focus on remediation activities and support/guide development teams as needed with remediation recommendations/solutions and setting up processes for risk reduction. Ensure all the security vulnerabilities identified by Twistlock and Microsoft Azure Policy violations are captured, reviewed, and responded to in accordance with TRO defined Service Level Objectives (SLO). Establish baseline for SLO and risk management activities for Azure Policy violations and Twistlock vulnerabilities. Analyze the Twistlock and Azure policy violation outputs to define business requirements for JIRA/another tool integration. Ensure the vulnerabilities are registered and monitored in TRO JIRA/or another tool for tracking and providing leadership visibility through portfolio reporting on outstanding risk associated with vulnerabilities and remediation response performance. Define requirements for dashboard development for portfolio reporting. Analyzing data for risk reporting and trend analysis to ensure timely mitigation. Educate and collaborate with owners/stakeholders to prioritize very high and high security risks for remediation. This includes providing a methodology for prioritization of vulnerabilities for remediation, providing recommendations on how to remediate security risks, facilitating any other risk reduction/management processes, and reporting performance to meet remediation Service Level Objectives (SLOs). Requirements: Bachelor’s degree in Computer Science, Mathematics, Statistics, or equivalent work experience. Azure Security – 1 to 2 years’ experience Azure Cloud Security, Compliance, Governance – Azure Policies. Familiarity with Azure Policies, pipelines, gates, Azure policy for Kubernetes tracking compliance status, minimizing drift, Azure data encryption, evaluation triggers, Solid background in Information Security Risk Management and Compliance Great to have information security certifications (CISSP, CISA, CISM…) and Microsoft Azure certifications. LOGISTICS: Remote Work in Denver, Atlanta, San Francisco Bay Area (candidate must be in those locations / no relocation provided). COVID-19 Vaccine Required – Must be fully vaccinated OR provide valid medical or religious exemption. Must be able to successfully pass a 12-panel drug screen, 10-year background check, employment verification. You will need to be a current US Citizen or valid Green Card holder. No need for visa now or in future. W2 only – No sub vendors. Sponsorship NOT available. Must have direct contact information on resume (phone / email) to be considered. #J-18808-Ljbffr

Are you looking for an exciting job where you can put your skills and talents to work at a company you can feel proud to be a part of? Do you want a workplace that will challenge you and offer you opportunities to learn and grow? A position at Xcel Energy could be just what you're looking for. Position Summary Designs and executes critical aspects of the Enterprise Security Risk Management function. Develops, recommends and implements controls and cost-effective approaches to minimize the organization's risks effects. Partners with the business and technology teams to promote understanding of the business landscape in order to facilitate security risk-based discussions. Collaborates with executive and technical leadership to embed a security-focused mindset in all areas. Essential Responsibilities <ul><li>Analyzes organizational security risks, interactions, develop and publish security risk handbook, and procedures for implementation ensuring alignment with appropriate standards and frameworks.</li><li>Manage and execute risk identification, assessment and quantification, aggregation reporting, and monitoring processes. Interprets internal or external business issues and recommends solutions/best practices. Solves complex problems; takes a broad perspective to identify solutions.</li><li>Analyzes external market dynamics and other data sources to assess trends and develop actionable insights and recommendations to management, via understanding of the business model and the information available for analysis. Assist in coordinating the security risk within the context of the security risk model.</li><li>Assesses and communicates information regarding business risks with functions across the organization. Builds and maintains relationships with business partners, including understanding their specific risk landscape. Uses professional knowledge, skills, and experience to influence and guide, monitor, and credibly challenge business areas as they manage risk and make risk decisions.</li><li>Coordinates the security risk program efforts including risk modeling, comprehensive periodic risk assessments, and regulatory reporting standards and expectations.</li><li>Develops presentations appropriate for senior level audiences and external regulators. May mentor and give work direction to less experienced colleagues.</li></ul> Minimum Requirements <ul><li>Bachelor's degree or higher in an IT, OT or risk management related field.</li><li>Minimum of 8 years of experience working in security (physical or cyber).</li><li>3 years of experience with risk assessments, audit or control testing.</li><li>Experience and expertise in security and lifecycle management, auditing methodology, and technology risk assessments.</li><li>Self-starter; adaptable to change; motivated to set personal and program goals and proactively track performance against goals and initiatives.</li><li>Ability to document and explain risks and vulnerabilities to both business and technical stakeholders.</li><li>Ability to influence peers and management; ability to team cross-functionally and form relationships to achieve objectives.</li><li>Solid understanding of information security policies, standards, industry best practices, and frameworks. (ISO 27K, NIST 800-53, FISMA, BITS etc.).</li><li>Strong business acumen with the proven ability to bridge the gap between business and technology.</li></ul> Preferred Qualifications <ul><li>Demonstrated experience as a Leader and Mentor in a Security and Risk management capacity (4+ years)</li><li>Ability to manage Security and Risk Management metrics "enhancements and any visuals" around enhancements.</li><li>Demonstrated experience with thought leadership and critical thinking with the ability to lead strategically.</li></ul> As a leading combination electricity and natural gas energy company, Xcel Energy offers a comprehensive portfolio of energy-related products and services to 3.4 million electricity and 1.9 million natural gas customers across eight Western and Midwestern states. At Xcel Energy, we strive to be the preferred and trusted provider of the energy our customers need. If you're ready to be a part of something big, we invite you to join our team. All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Individuals with a disability who need an accommodation to apply please contact us at recruiting@xcelenergy.com. Non-Bargaining The anticipated starting base pay for this position is: $92,300.00 to $149,700.00 per year This position is eligible for the following benefits: Annual Incentive Program, Medical/Pharmacy Plan, Dental, Vision, Life Insurance, Dependent Care Reimbursement Account, Health Care Reimbursement Account, Health Savings Account (HSA) (if enrolled in eligible health plan), Limited-Purpose FSA (if enrolled in eligible health plan and HSA), Transportation Reimbursement Account, Short-term disability (STD), Long-term disability (LTD), Employee Assistance Program (EAP), Fitness Center Reimbursement (if enrolled in eligible health plan), Tuition reimbursement, Transit programs, Employee recognition program, Pension, 401(k) plan, Paid time off (PTO), Holidays, Volunteer Paid Time Off (VPTO), Parental Leave Benefit plans are subject to change and Xcel Energy has the right to end, suspend, or amend any of its plans, at any time, in whole or in part. Deadline to Apply: 07/06/24 EEO is the Law | EEO is the Law Supplement | Pay Transparency Nondiscrimination | Equal Opportunity Policy (PDF) | Employee Rights (PDF) ACCESSIBILITY STATEMENT Xcel Energy endeavors to make https://www.xcelenergy.com/ accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact Xcel Energy Talent Acquisition at recruiting@xcelenergy.com. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.

Risk Analyst Jobs in Denver, CO

Azure Cloud Security Risk Analyst
July 24, 2024

Lead Security Risk Analyst
July 23, 2024

Quantitative Risk Analyst
July 16, 2024

Lead Security Risk Analyst
July 14, 2024

Azure Cloud Security Risk Analyst
July 7, 2024

Principal Security Risk Analyst
July 1, 2024

Principal Security Risk Analyst
June 28, 2024

Quick filters

Top companies

Risk Analyst Jobs in Denver, CO

Azure Cloud Security Risk AnalystJuly 24, 2024

Lead Security Risk AnalystJuly 23, 2024

Quantitative Risk AnalystJuly 16, 2024

Lead Security Risk AnalystJuly 14, 2024

Azure Cloud Security Risk AnalystJuly 7, 2024

Principal Security Risk AnalystJuly 1, 2024

Principal Security Risk AnalystJune 28, 2024