Enterprise Security Senior Analyst, Security Partner

Momentum
Momentum

IT

San Francisco, CA, USA · New York, NY, USA · Bellevue, Washington, DC, USA

Posted on Oct 14, 2026
The Experience

Enterprise Security is looking for a Senior Analyst to support our Business Information Security Officers (BISOs) in their day-to-day work with Enterprise business unit customers. BISOs drive measurable security improvements and own the health of the relationship between their business units and Enterprise Security. As a Senior Analyst, you work alongside BISOs to keep those engagements running smoothly — tracking risks and commitments, coordinating deliverables, and preparing materials for stakeholder reviews.

This role suits someone building on a solid cybersecurity foundation while working alongside experienced security professionals. You won't make independent architectural or risk-acceptance calls — those sit with the BISOs you support. You will make their work visible, actionable, and well-documented, and own the operational rhythm that keeps the team credible with its business unit customers.

What You'll Actually Be Doing
  • Maintain an accurate, prioritized risk register for assigned business units, including intake of new findings and status updates
  • Track risk buy-down commitments — owners, dates, status — and flag slippage to the responsible BISO
  • Prepare recurring stakeholder materials (status decks, dashboards, executive read-outs) under BISO direction
  • Coordinate meetings between BISOs, business unit customers, and specialist teams; capture actions and drive follow-up


You're Our Person If...
  • You have 3+ years of experience in consulting or a large corporate environment with a complex IT environment
  • You have strong understanding of security internal control methodologies and terminology (e.g., COSO, Cybersecurity Framework (CSF))
  • You can identify and articulate key security risks and develop controls to mitigate them
  • You have experience implementing and testing security controls based on the NIST SP 800-53 standard


Even Better If...
  • You've designed and implemented internal controls in response to identified risks
  • You're experienced with data and reporting tools such as Tableau or Visio
  • You hold a CISSP, CISA, PMP, or CISM certification

*LI-Y