Senior Associate, Security Analyst

Core Spaces•Chicago, IL

31d•$115,000 - $125,000•Hybrid

About The Position

The Senior Security Analyst will play a strategic role in advancing Core’s enterprise security program. This individual will lead initiatives across vendor risk management, user access governance, NIST-based risk management, SOX-aligned IT controls, and incident response readiness. The role requires both hands-on execution and program-level leadership, ensuring security initiatives are scalable, audit-ready, and aligned with business objectives.

Requirements

Bachelor’s degree in Cybersecurity or related field required
5-6 years of experience in security or risk management within an enterprise environment
Familiarity with TPRM processes and tools - ProcessUnity experience preferred
Business experience working with an established security program
Strong communication and team collaboration skills; technical depth not required, but a security background is essential

Nice To Haves

Building or maturing a formal TPRM governance framework.
Designing KPI dashboards for audit tracking and risk remediation.
Leading incident response tabletop exercises.
Operating in a SOX-regulated or highly regulated environment.
Driving cross-functional alignment between IT, Finance, HR, and Legal.

Responsibilities

Lead enterprise user access governance, including quarterly access reviews, risk ranking, and executive reporting.
Own and enhance the Third-Party Risk Management (TPRM) program, including ProcessUnity administration, vendor tiering, and risk scoring methodologies.
Drive NIST CSF alignment efforts and oversee remediation planning for identified control gaps.
Partner with Finance and external auditors to ensure SOX ITGC compliance and evidence readiness. Evaluate and strengthen Microsoft tenant security posture during ongoing migration initiatives.
Lead incident response coordination, including tabletop exercises and after-action reporting.
Develop security metrics and dashboards to track risk reduction, audit findings, and remediation timelines.
Draft, update, and mature enterprise security policies and standards.
Provide security guidance to cross-functional teams to ensure compliance with established controls.
Stay current on emerging threats, IAM best practices, and regulatory requirements.

Benefits

A culture that provides you with a sense of belonging
Hybrid or remote work options may vary by role to support work-life balance
Competitive pay that values your contributions
Incentives designed to reward your achievements
Paid flexible PTO to disconnect or celebrate life milestones
Paid 14+ holidays, including your birthday, to disconnect and celebrate
Paid Parental Leave that begins after 90 days
Paid volunteer time off to give back to your community
Monthly workshop weeks; fewer meetings & more collaboration
Robust health plan options that begin within at least 30 days of your employment
Monthly phone reimbursement
Wellness allowance and perks, including a yearly subscription to a meditation app
An environment that provides you a voice to share your perspectives
Employee Assistance Program (EAP) for access to confidential support services
Company retirement options including 401(k) + matching & Roth account option