Identify, document, and assess security risks across Five9's environment, including production infrastructure, cloud services, corporate systems, and acquired platforms
Maintain the Security Risk Register in Jira, ensuring risks are accurately categorized, assigned to appropriate owners, and tracked through their lifecycle
Engage with service owners, engineering leads, and operations teams to establish risk ownership and drive remediation or mitigation plans
Facilitate the risk acceptance process, including preparing risk acceptance documentation and coordinating approval with appropriate stakeholders
Develop and deliver risk reporting for security leadership and executive audiences, including dashboards and metrics
Collaborate with compliance, vulnerability management, and other Information Security functions to ensure risk findings are incorporated
Research and apply risk management frameworks and methodologies to continuously improve program maturity
Contribute to the development of risk management policies, procedures, and playbooks
Requirements
3+ years of experience in information security, with at least 2 years focused on security risk management or GRC
Demonstrated experience maintaining a security risk register and driving risk treatment decisions with cross-functional stakeholders
Strong understanding of risk assessment methodologies (qualitative and quantitative)
Familiarity with security frameworks such as NIST CSF, NIST 800-53, ISO 27001, PCI, or SOC 2
Ability to communicate security risks clearly to both technical and non-technical audiences
Experience with Jira or similar tools for tracking and managing risk workflows
Self-directed and comfortable engaging directly with service owners, engineers, and leadership to resolve ambiguity around risk ownership
Done for you
We'll apply to this for you
Denidel's HR team submits and tracks the application on your behalf.
