Conduct day-to-day risk ticket analysis and lead in-depth assessments of product launches and infrastructure changes
Further operationalize and mature the One Twilio Risk Management framework leveraging risk management frameworks
Build and optimize automated workflows
Layer compliance frameworks into the risk process
Articulate the "big picture" of risk impact to stakeholders
Implement security risk solutions that are practical and effective

5+ years of direct experience in Security Risk Management
Proven track record of building and operationalizing industry-accepted risk frameworks (e.g., NIST RMF, COSO ERM, or ISO 31000)
Broad understanding of security architecture, networking, access control, software development, cryptography, and operations
Strong understanding of both qualitative and quantitative risk analysis
Ability to collaborate with technical Security, Engineering, and IT teams
Advanced proficiency in Jira for workflow orchestration
Comfortable with ambiguity and highly adaptable to fast-changing environments
Deep understanding of hybrid cloud environments (AWS/GCP), on-premise infrastructure, and microservices
Ability to pivot quickly between tactical "firefighting" and long-term strategic planning
Exceptional written and verbal communication skills

Information Security Analyst

Key skills