Cyber Threat Remediation Analyst – Security Governance & Risk Management

Iconma Portal•Phoenix, AZ

4d•Hybrid

About The Position

The Cyber Threat Remediation Analyst will drive the day-to-day operations of the Threat Remediation Program by coordinating cyber threat remediation efforts, engaging technical stakeholders, managing governance activities, and helping mature enterprise remediation processes. The role serves as the operational coordinator for enterprise threat remediation activities, managing findings from intake through closure, supporting threat applicability assessments, tracking remediation, and improving workflows. It extends beyond traditional vulnerability management by incorporating insights from Cyber Threat Intelligence, Incident Response, Red Team assessments, penetration testing, security assessments, and other cybersecurity initiatives. The analyst works with Cyber Threat Intelligence, Incident Response, Red Team, Security Engineering, Technology Risk, application and infrastructure teams, and ServiceNow stakeholders to assess and remediate threats and reduce organizational risk. The position is listed as a contract role and is based in Phoenix, Arizona, with a hybrid location arrangement. The posting describes a mid-level candidate with 3–5 years of relevant experience, though it also separately lists “9.00 Years of Experience.”

Requirements

3–5 years of experience in cybersecurity, security operations, technology risk, GRC, vulnerability management, incident response, security program management, or a related field.
Experience coordinating remediation efforts, security findings, or risk management activities.
Strong organizational, project coordination, and stakeholder management skills.
Experience working with technical teams and business partners.
Strong written and verbal communication skills.
Experience preparing presentations, reports, and executive updates.
Ability to understand cybersecurity concepts and translate technical information into actionable business outcomes.

Nice To Haves

Experience working with findings generated from Cyber Threat Intelligence, Incident Response, Red Team assessments, penetration testing, or security assessments.
Familiarity with MITRE ATT&CK, NIST Cybersecurity Framework (CSF), NIST SP 800-53, or CIS Controls.
Experience creating process documentation, workflow diagrams, playbooks, questionnaires, or operational procedures.
Experience with ServiceNow, Jira, Archer, or similar workflow and governance platforms.
Experience developing dashboards and reporting using Power BI, Excel, Tableau, or similar tools.
Understanding of enterprise technologies, including networking, cloud platforms, operating systems, identity and access management, and endpoint security.
Experience with automation, low-code workflows, scripting, or AI-enabled solutions.
Security+, CySA+, SSCP, GSEC, or similar cybersecurity certifications.

Responsibilities

Manage the end-to-end lifecycle of cyber threat findings from intake through closure.
Coordinate remediation efforts with application, infrastructure, cloud, IAM, and security teams.
Track ownership, remediation milestones, evidence, exceptions, and risk acceptance requests.
Identify blockers, facilitate resolution discussions, and escalate issues as needed.
Prepare remediation status updates and reports for leadership.
Support reviews of emerging cyber threats and security findings to determine organizational applicability and exposure.
Facilitate threat applicability assessments with technology teams.
Maintain remediation questionnaires, assessment templates, and supporting documentation.
Document remediation plans, compensating controls, and risk decisions.
Create and maintain process maps, workflow diagrams, playbooks, and operational procedures.
Partner with ServiceNow teams to improve remediation tracking, workflows, reporting, and intake processes.
Assist with business requirements gathering and process improvement initiatives.
Support workflow automation and operational efficiency efforts.
Maintain remediation dashboards, metrics, scorecards, and executive reporting.
Support governance reviews, audits, and compliance activities.
Monitor remediation aging, SLA performance, and overall program health.
Contribute to the ongoing maturation of the Threat Remediation Program.