Security Risk Analyst

Information Security Risk Analyst

Join a leading alternative investment firm that manages billions in assets across private equity, private credit, and strategic investment platforms. The organization partners with middle-market companies to drive growth and long-term value creation, supported by a highly collaborative team spanning investment, legal, compliance, operations, and technology functions. With a strong focus on governance, operational excellence, and cybersecurity, the firm continues to invest in modern security and risk management capabilities that support both business growth and investor confidence.

What You'll Do

• Conduct information security risk assessments for applications, vendors, and internal systems.
• Review security controls, identify risks, and track remediation efforts.
• Support SOC 1 controls, audit readiness, and evidence collection activities.
• Manage security due diligence questionnaires and communicate security controls to investors and stakeholders.
• Partner with IT, Legal, Compliance, HR, and business teams on risk and governance initiatives.
• Assist with vendor risk management, change management reviews, investigations, and eDiscovery activities.
• Contribute to policy development, governance reporting, and continuous improvement of security processes.

What We're Looking For

• 3+ years of experience in Information Security, Risk Management, GRC, Audit, Compliance, or a related field.
• Experience performing risk assessments, control reviews, and audit support.
• Knowledge of frameworks such as NIST CSF, ISO 27001, and SOC controls.
• Strong communication skills with the ability to translate technical risks into business terms.
• Experience with vendor risk management and governance processes.
• Certifications such as Security+, CISA, CRISC, or ISO 27001 are a plus.
• High-visibility role supporting executive leadership and business stakeholders.
• Opportunity to influence and mature a growing security governance and risk program.
• Exposure to enterprise security, third-party risk, audits, compliance, and investor-facing security initiatives.
• Collaborative environment where security is viewed as a strategic business enabler.

Compensation

$100,000 – $155,000 base salary (Based on experience) plus bonus, benefits and equity

Hybrid

Boston, MA

FULL_TIME