Cybersecurity Risk Assessment Specialist

PIMCO•Austin, TX

14d

About The Position

We are a leading global asset management firm with over 3,000 employees across 20 offices in 15 countries; we help millions of investors around the world pursue their financial goals. We hire critical thinkers. People who thrive in a collaborative culture like ours where we solve real problems while building the future of finance. You Are excited to be part of a vibrant engineering community that values diversity, hard work, and continuous learning. Love solving complex real-world business problems. Recognize that cross-functional collaboration is a core component of success for the team. Believe there are multiple ways to solve most technical problems and are willing to debate the trade-offs. Have become a stronger engineer by making mistakes and learning from them. Are a doer, someone who wants to grow their career and gain experience across technologies and business functions. We Continuously invest in a high-performance and inclusive culture, in which a diversity of backgrounds, experiences and viewpoints are celebrated and valued. Encourage career mobility, so you can benefit from learning different functions and technologies, and we gain the benefits of your experience across teams. Run technology pro bono programs that help the non-profit community and give our engineering community opportunities to volunteer and participate. Offer education reimbursements and ongoing training in technology, communication, and diversity & inclusion. Embrace knowledge sharing through lunch-and-learns, demos, and technical forums. Consider our people to be our greatest asset—we will help you learn what PIMCO Technology has to offer so you can participate in activities that benefit your career while delivering impactful technology solutions. PIMCO Cybersecurity is looking to hire a Cybersecurity Risk Assessment Specialist to support the buildout and management of the Cyber Risk Assessment function. The ideal candidate has an analytical mind and detailed understanding of the core concepts of IT risk management, IT audit, and risk assessments. This candidate should be meticulous with great attention to detail, able to clearly articulate risk positions, possess outstanding problem-solving skills, work comfortably under pressure, and deliver under tight deadlines. The expectation is that any candidate for this position will assume the front-to-back ownership of the Cybersecurity Risk Assessment function and will drive risk-focused conversations with management and other key stakeholders. Top candidates will be comfortable applying a risk-based approach in the management and coordination of the Assessment process and any resulting remedial actions. In addition, the role will include the creation of activities to reduce the risk profile of the firm including risk trend identification, proactive risk reduction measures, staff education, and the establishment of best practices for engagement.

Requirements

A degree in Computer Science, Audit, IT Risk, Systems Engineering or relevant qualifications or experience.
7-10 years Cybersecurity Risk Assessment or IT Risk Management experience.
Excellent communication skills.
Excellent organizational and project management skills
Proficient experience with Microsoft Excel and PowerPoint
Ability to work under pressure in a fast-paced environment.
Strong attention to detail with an analytical mindset and outstanding problem-solving skills
Awareness of cybersecurity trends.

Nice To Haves

CRISC, CISM, CISSP

Responsibilities

Serve as the primary point of contact for the Cybersecurity Risk Assessment and Regulatory Compliance processes.
Develop and maintain a comprehensive cybersecurity risk assessment methodology, including control design reviews, operational effectiveness testing, evidence management, risk reporting, and remediation tracking.
Ensure ongoing alignment with applicable regulatory frameworks and obligations by establishing a structured process for regular compliance testing and validation.
Maintain alignment with internal cybersecurity policies, standards, and procedures, including the creation of a repeatable process for periodic control testing and policy framework validation.
Identify vulnerabilities, threats, and control deficiencies using recognized industry frameworks and best practices.
Assess the likelihood and impact of identified risks and translate technical findings into clear, actionable insights for business and technology leaders.
Collaborate closely with Cybersecurity, Technology, and business stakeholders to verify that security controls are designed and operating effectively.
Support compliance and certification initiatives by mapping controls, identifying gaps, and contributing to remediation strategies.
Monitor, track, and validate remediation activities to ensure timely and effective risk reduction.
Demonstrate a commitment to integrity, process improvement, and customer satisfaction.