Network Security Risk & Compliance Analyst II

A client with Kforce is seeking a Network Security Risk & Compliance Analyst to join their team in Newport Beach, CA. Summary: This position serves as the primary liaison between Network Security, Cyber Risk, Operational Risk & Resilience (OR&R), Audit, Vulnerability Management, and Security Operations teams. This role is responsible for driving the maturity, effectiveness, and compliance of the Network Security program through control assessments, risk management, vulnerability remediation oversight, incident response coordination, and security assurance activities. This is not a traditional SOC analyst or firewall administration role. Success in this position requires experience with cybersecurity governance, control assurance, risk management, vulnerability remediation, incident response coordination, and cross-functional security program leadership. The ideal candidate possesses a blend of cybersecurity governance, risk management, compliance, vulnerability management, incident response, and network security experience, with the ability to influence outcomes across technical and business stakeholders. Responsibilities:

• Act as the Network Security representative for OR&R, Cyber Risk, Audit, and Compliance activities
• Support assessments and ongoing effectiveness reviews of Network Security controls within the Enterprise Control Model
• Coordinate evidence collection, remediation activities, issue tracking, and risk treatment plans
• Identify control gaps and partner with engineering and operations teams to drive corrective actions
• Coordinate remediation activities for vulnerabilities impacting network security platforms and services
• Partner with Vulnerability Management teams to ensure timely mitigation of critical and high-risk findings
• Support internal and external penetration testing activities and drive remediation efforts resulting from assessment findings
• 5+ years of experience in Cybersecurity, Risk Management, Governance & Compliance, Security Operations, or Network Security
• Experience supporting audits, risk assessments, control testing, or compliance programs
• Experience working with vulnerability management, penetration testing, incident response, or security assurance programs
• Strong understanding of cybersecurity risk management and control frameworks
• Excellent communication and stakeholder management skills
• Ability to drive remediation efforts across multiple teams and technical disciplines
• Experience with enterprise network security technologies including firewalls, web application firewalls, proxies, remote access, and Zero Trust solutions

• Preferred Certifications: GSEC, CISSP, CRISC, CISA, CGRC
• NIST Cybersecurity Framework (CSF), CIS Critical Security Controls
• Cybersecurity Governance, Risk & Compliance (GRC)
• Control effectiveness assessment and evidence management
• Vulnerability management and remediation programs
• Incident response and operational resilience

• Serves as the trusted Network Security partner for OR&R, Cyber Risk, Audit, and Vulnerability Management teams
• Drives successful completion of control assessments and remediation activities
• Improves visibility into network security risk, compliance, and control effectiveness
• Advances Network Security program maturity through measurable improvements in governance, resilience, and risk management