Network Security Risk & Compliance Analyst II

We're currently hiring a Network Security Analyst II for a client based in Newport Beach, CA
Hourly Pay Rate: $60.00 -to- 66.90
Its temp to hire

Please note: This role is offered on a W 2 basis only. Candidates represented by third party employers cannot be considered.

Overview
The Network Security Risk & Compliance Analyst serves as the primary liaison between Network Security, Cyber Risk, Operational Risk & Resilience (OR&R), Audit, Vulnerability Management, and Security Operations teams. This role is responsible for driving the maturity, effectiveness, and compliance of the Network Security program through control assessments, risk management, vulnerability remediation oversight, incident response coordination, and security assurance activities.
This is not a traditional SOC analyst or firewall administration role. Success in this position requires experience with cybersecurity governance, control assurance, risk management, vulnerability remediation, incident response coordination, and cross-functional security program leadership
The ideal candidate possesses a blend of cybersecurity governance, risk management, compliance, vulnerability management, incident response, and network security experience, with the ability to influence outcomes across technical and business stakeholders.

Key Responsibilities
--Governance, Risk & Control Assurance
* Act as the Network Security representative for OR&R, Cyber Risk, Audit, and Compliance activities.
* Support assessments and ongoing effectiveness reviews of Network Security controls within the Enterprise Control Model.
* Coordinate evidence collection, remediation activities, issue tracking, and risk treatment plans.
* Identify control gaps and partner with engineering and operations teams to drive corrective actions.
--Vulnerability & Security Assessment Management
* Coordinate remediation activities for vulnerabilities impacting network security platforms and services.
* Partner with Vulnerability Management teams to ensure timely mitigation of critical and high-risk findings.
Support internal and external penetration testing activities and drive remediation efforts resulting from assessment findings.
* Track risk exceptions and remediation commitments through closure.
--Incident Response & Operational Resilience
* Participate in network security related incident response and post-incident review activities.
* Coordinate Network Security participation in tabletop exercises, cyber resilience testing, and maturity assessments.
* Identify opportunities to improve operational readiness, security posture, and control effectiveness.
--Risk Reporting & Program Maturity
* Participate in quarterly Key Risk Indicator (KRI) reviews and risk governance forums.
* Develop reporting and metrics related to control effectiveness, vulnerabilities, risk posture, and remediation progress.
* Identify and implement automation opportunities across security workflows to improve efficiency and response times
* Support continuous improvement initiatives aligned to NIST Cybersecurity Framework (CSF) and CIS Controls.

Required Qualifications
* 5+ years of experience in Cybersecurity, Risk Management, Governance & Compliance, Security Operations, or Network Security.
* Experience supporting audits, risk assessments, control testing, or compliance programs.
* Experience working with vulnerability management, penetration testing, incident response, or security assurance programs.
* Strong understanding of cybersecurity risk management and control frameworks.
* Excellent communication and stakeholder management skills.
* Ability to drive remediation efforts across multiple teams and technical disciplines.
Enterprise network security technologies including firewalls, web application firewalls, proxies, remote access, and Zero Trust solutions

Preferred Knowledge & Experience
* NIST Cybersecurity Framework (CSF), CIS Critical Security Controls
* Cybersecurity Governance, Risk & Compliance (GRC)
* Control effectiveness assessment and evidence management
* Vulnerability management and remediation programs
* Incident response and operational resilience

Preferred Certifications
* GSEC, CISSP, CRISC, CISA, CGRC

What Success Looks Like
* Serves as the trusted Network Security partner for OR&R, Cyber Risk, Audit, and Vulnerability Management teams.
* Drives successful completion of control assessments and remediation activities.
* Improves visibility into network security risk, compliance, and control effectiveness.
* Advances Network Security program maturity through measurable improvements in governance, resilience, and risk management.

All qualified applicants will receive consideration for employment without regard to race, color, national origin, age, ancestry, religion, sex, sexual orientation, gender identity, gender expression, marital status, disability, medical condition, genetic information, pregnancy, or military or veteran status. We consider all qualified applicants, including those with criminal histories, in a manner consistent with state and local laws, including the California Fair Chance Act, City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, Los Angeles County Fair Chance Ordinance, and San Francisco Fair Chance Ordinance.