> Markdown version of [/jobs/ext/3298507-information-security-risk-analyst](https://www.wearedevelopers.com/jobs/ext/3298507-information-security-risk-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Risk Analyst

- **Company:** Fisher Investments
- **Location:** Camas, WA, United States (Remote available)
- **Salary:** $80,200.0 - $130,000.0
- **Contract:** Permanent contract
- **Skills:** Cloud Computing, Cyber Security, Information Systems, Digital Assets, Open Web Application Security, PCI Data Security Standards, Scrum Methodology, Okta, Information Technology, RSA Archer Platform, CIS Benchmarks, Splunk
- **Published:** September 17, 2026
- **Apply:** https://www.oriontalent.com/search-jobs/career/11662144/information-security-risk-analyst-washington-wa-camas

## About the Role

* Bachelor's degree in computer science, Information Security, or related discipline or equivalent experience
 * 3+ years of experience in Enterprise Risk Management for Digital Assets, including development of risk evaluation processes, control evaluations and recommendations, and vendor research
 * 1+ years of experience in Digital Asset audit review experience (including SOC 2 Type II, SOX compliance, PCI compliance, vulnerability reports, retention policies)
 * Knowledge of Information Security and risk standards and frameworks such as NIST 800-53, CIS benchmarks, OWASP, ISO-27001, ITIL and COSO
 * Experience assessing risk or implementing controls in a cloud-based enterprise environment
 * Extensive knowledge of information systems, risk assessment methodologies and security control technologies such as Okta, EntraID, Splunk, and Netskope
 * Balance risks in ambiguous and complex scenarios
 * Team-oriented, highly collaborative, experienced leading initiatives
 * Experience in GRC platforms
 * Deliver quality as part of a Scrum team working in an Agile environment
 * Preference given to experience in a regulated industry: Finance, Healthcare, etc.

## Description

The Information Security Risk Analyst, reporting to the Vice President - Information Security, will work with Information Security, Technology, Project, and Enterprise Risk Management teams to perform technology risk analysis and recommend controls. You will also develop, recommend, and implement technology risk practices following Fisher Investments Digital Asset risk management goals.

The Day-to-Day:

 * Represent Information Security in Enterprise Risk Management technology reviews for Digital Assets, including evaluation of inherent risk, researching vendor practices and controls, recommending new practices and controls, and estimating residual risk
 * Continuously collaborate with Information Security, Technology, and Data Privacy Subject Matter Experts to determine efficacy of technical and practical Digital Asset controls
 * Research new possible technical and practical Digital Asset risk controls
 * Perform security-focused risk and gap assessments to identify, document and track security risks associated with Cloud and physical IT infrastructure and services, Applications, Information systems, and Vendors/other third parties
 * Identify risk levels and associated controls to manage risk levels applying both quantitative and qualitative techniques
 * Assist in continuously maturing Enterprise Risk Management evaluation procedures for Digital Assets
 * Translate risk management information from technical to business language
 * Provide security risk services to business owners and partners
 * Work with project teams to collect and document evidence of cyber control implementation
 * Understand and maintain a broad knowledge of methodologies and technologies in risk assessments and controls measures