Cybersecurity Risk Analyst II

CLEAR - Corporate•New York, NY

17h•$119,000 - $140,000•Onsite

About The Position

As a Cybersecurity Risk Analyst II, you'll help strengthen CLEAR's security posture by identifying, assessing, and reducing cyber risk across our products, technology, and third-party ecosystem. Partnering closely with Engineering, Product, Legal, Privacy, and Security teams, you'll influence risk-based decisions that protect millions of members while enabling secure innovation across CLEAR's identity platform.

Requirements

3-5+ years of experience in cybersecurity risk management or a similar role, ideally in industries requiring high levels of data privacy and protection (e.g., technology, finance, healthcare)
Communicating complex technical and business risk clearly to both technical and non-technical audiences
Partnering with Engineering teams by asking thoughtful questions, understanding technical architectures, and challenging assumptions to improve security outcomes
Staying organized and effectively balancing multiple priorities in a fast-paced, cross-functional environment
Thriving in ambiguity by building structure, driving clarity, and delivering practical solutions
Applying analytical and critical thinking skills to quickly understand new technologies, systems, and business domains
Leveraging quantitative reasoning to support risk-based decision making; experience with FAIR or other cyber risk quantification frameworks is a plus

Responsibilities

Own CLEAR's third-party risk management program end-to-end, including vendor security assessments, due diligence, and ongoing monitoring across our partner ecosystem
Lead the cyber risk management lifecycle by identifying, assessing, prioritizing, and tracking risks through remediation
Translate complex technical risk into clear, actionable recommendations that enable business and engineering leaders to make informed decisions
Develop and maintain meaningful risk metrics, dashboards, and reporting that provide leadership with visibility into CLEAR’s evolving cyber risk posture
Partner with Engineering, Product, Privacy, Legal, and Security teams to ensure security requirements are understood, implemented, and validated throughout the development lifecycle
Identify and drive continuous process improvements that make risk management more scalable, efficient, and effective while reducing friction for internal stakeholders
Support risk quantification initiatives by applying probabilistic and data-driven approaches to better measure, prioritize, and communicate risk