Cyber Threat Remediation Analyst

Our client, a IT Services and Consulting company, is looking for a Cyber Threat Remediation Analyst for their Phoenix, AZ location.
 
Responsibilities:

• Responsible for driving the day-to-day operations of the Threat Remediation Program by coordinating cyber threat remediation efforts, engaging technical stakeholders, managing governance activities, and helping mature remediation processes across the enterprise.
• This position is ideal for someone whenjoys combining cybersecurity knowledge, stakeholder engagement, process improvement, and program execution tdrive meaningful risk reduction. You will work closely with Cyber Threat Intelligence (CTI), Incident Response, Red Team, Security Engineering, Technology Risk, application teams, infrastructure teams, and ServiceNow stakeholders tensure cyber threats are effectively assessed, tracked, and remediated.
• The Cyber Threat Remediation Analyst serves as the operational coordinator for enterprise threat remediation activities. This role focuses on managing remediation processes, tracking cyber threat findings, facilitating stakeholder engagement, supporting threat applicability assessments, and improving remediation workflows.
• Unlike traditional Vulnerability Management roles focused primarily on patching activities, this position supports a broader Threat Remediation Program that incorporates insights from:
• Cyber Threat Intelligence
• Incident Response
• Red Team Assessments
• Penetration Testing
• Security Assessments
• Other Cybersecurity Initiatives
• This role is ideal for someone whenjoys combining cybersecurity knowledge, stakeholder engagement, process improvement, and program execution thelp drive meaningful risk reduction across the enterprise. It goes beyond program tracking by helping evaluate threat applicability, assess organizational exposure, and influence remediation decisions in partnership with cybersecurity subject matter experts.
• Key Responsibilities
• Threat Remediation Coordination
• Manage the end-to-end lifecycle of cyber threat findings from intake through closure.
• Coordinate remediation efforts with:
• Application teams
• Infrastructure teams
• Cloud teams
• IAM teams
• Security teams
• Track:
• Ownership
• Remediation milestones
• Evidence
• Exceptions
• Risk acceptance requests
• Identify blockers, facilitate resolution discussions, and escalate issues as needed.
• Prepare status updates and remediation reporting for leadership.
• Threat Assessment Support
• Support reviews of emerging cyber threats and security findings tdetermine organizational applicability and exposure.
• Facilitate threat applicability assessments with technology teams.
• Maintain:
• Remediation questionnaires
• Assessment templates
• Supporting documentation
• Document:
• Remediation plans
• Compensating controls
• Risk decisions
• Process & Workflow Development
• Create and maintain:
• Process maps
• Workflow diagrams
• Playbooks
• Operational procedures
• Partner with ServiceNow teams timprove:
• Remediation tracking
• Workflows
• Reporting
• Intake processes
• Assist with business requirements gathering and process improvement initiatives.
• Support workflow automation and operational efficiency efforts.
• Governance & Reporting
• Maintain:
• Remediation dashboards
• Metrics
• Scorecards
• Executive reporting
• Support governance reviews, audits, and compliance activities.
• Monitor:
• Remediation aging
• SLA performance
• Overall program health
• Contribute tthe ongoing maturation of the Threat Remediation Program.

• What are the top 3 skills required for this role
• Threat Remediation & Security Operations
• Cybersecurity Risk Assessment & Threat Analysis
• Stakeholder Management, Process Improvement & Governance
• Vulnerability Management
• ServiceNow, Jira, Archer
• 3–5 years of experience in:
• Cybersecurity
• Security Operations
• Technology Risk
• Governance, Risk & Compliance (GRC)
• Vulnerability Management
• Incident Response
• Security Program Management
• Related fields
• Experience coordinating remediation efforts, security findings, or risk management activities.
• Strong organizational, project coordination, and stakeholder management skills.
• Experience working with both technical teams and business partners.
• Strong written and verbal communication skills.
• Experience preparing:
• Presentations
• Reports
• Executive updates
• Ability tunderstand cybersecurity concepts and translate technical information intactionable business outcomes.
• Preferred Qualifications
• Experience working with findings generated from:
• Cyber Threat Intelligence
• Incident Response
• Red Team Assessments
• Penetration Testing
• Security Assessments
• Familiarity with:
• MITRE ATT&CK
• NIST Cybersecurity Framework (CSF)
• NIST SP 800-53
• CIS Controls
• Experience creating:
• Process documentation
• Workflow diagrams
• Playbooks
• Questionnaires
• Operational procedures
• Experience with:
• ServiceNow
• Jira
• Archer
• Similar workflow and governance platforms
• Experience developing dashboards and reporting using:
• Power BI
• Excel
• Tableau
• Similar tools
• Understanding of enterprise technologies, including:
• Networking
• Cloud platforms
• Operating systems
• Identity and Access Management
• Endpoint Security
• Experience with automation, low-code workflows, scripting, or AI-enabled solutions is a plus.
• Preferred Certifications
• Security+
• CySA+
• SSCP
• GSEC
• Similar Cybersecurity Certifications
• Years of Experience:   7.00 Years of Experience

• Health Benefits
• Referral Program
• Excellent growth and advancement opportunities