Senior Security Risk Analyst

Role Overview

Senior Security Risk Analyst in Twilio’s One Twilio Risk Management program. You will help mature the company’s security risk posture by facilitating risk identification and treatment, managing risk artifacts, reporting on risk, and ensuring alignment with regulations and industry best practices.

Key Responsibilities

• Facilitate risk identification and treatment to improve day-to-day Risk Management program operations.
• Manage and maintain risk register(s), tracking KRIs and ensuring risks are identified, evaluated, and mitigated appropriately.
• Collaborate with cross-functional teams to communicate risks clearly and make them actionable.
• Prepare and deliver regular risk reports.
• Analyze risk data and perform qualitative/quantitative risk analysis to translate technical vulnerabilities into business impact.
• Translate vulnerabilities, control gaps, and limitations into clear, actionable risk statements.
• Support regulated, multi-entity, cross-functional risk assessments and compliance program activities.

Requirements

• 5+ years of Risk Management experience with security-centric risk management and compliance frameworks.
• Experience maturing an industry-accepted risk framework, including (but not limited to) NIST RMF, COSO ERM, or ISO 31000.
• Proven track record managing large-scale, heavily regulated, multi-entity, cross-functional risk assessments, risk registers, and compliance programs.
• Strong analytical and problem-solving skills; ability to interpret complex data and deliver actionable insights.
• Excellent communication skills to translate risk into recommendations for leadership.
• Ability to work with technical security and Engineering/IT teams to implement risk/control solutions and relay control requirements to stakeholders.
• Ability to manage multiple projects and operate in ambiguous, fast-changing environments.
• Bachelor’s degree in Risk Management, Business, Finance, Cybersecurity, or a related field.

Nice to Have

• Professional certifications such as CRISC, CISA, CISSP, or FRM.
• Experience leveraging AI to streamline risk operations.
• Strong proficiency with enterprise AI and GRC tooling.
• Experience with project management across multiple teams and departments.

Location / Work Style

• Full remote