College Board

College Board

Security Risk Analyst

Remote - USA · Full-time

Sponsorship not specified$53k-$800kDetected 88 days ago
CybersecurityComplianceNegotiationLeadershipCommunicationCISSP

Stay score

odds of building a lasting career here

88Lottery-free
Cap-exempt (no lottery)100
Sponsors year-round90
Entry-level history60
PERM / green-card track50
Fits your clock70

Files H-1B any time — no cap, no lottery. The 2026 weighted-selection rule doesn't touch it, which makes this the strongest structural path for entry-level talent. Pay is often lower, but your odds of staying are dramatically higher.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Employer immigration record

from this employer's Department of Labor filings

Green-card filing pattern in this occupation

Context, not a finding about this posting: of this employer's 3 green-card filings in this occupation, 100% were for a worker who already held the job.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • External Posting Role Title - Security Risk Analyst
  • Candidates who live near CB offices have the option of being fully remote or hybrid (Tuesday and Wednesday in office).
  • The Information Security Governance Risk and Compliance (ISGRC) team at the College Board works closely with other teams across the organization to assess and certify the security of College Board's information systems and processes.

Responsibilities

  • Leads the management of the issues and risks and quickly escalates any untimely completion of audit actions.
  • Understands College Board work to be able to drive Risk or Control Owners to ensure consistent application of policies and standards.
  • Evaluates and manage exceptions to IT security policies.
  • Manages materials for the Exception Review Board and presents exception information to executive leadership and senior team members.
  • Maintains an up -to-date knowledge and understanding of IT security policies and principles.
  • Support the Vendor Risk Management program by understanding policies and procedures.
  • Perform New Vendor Risk Assessments and Reassessments.
  • At College Board, we offer more than a paycheck- we provide a meaningful career, a supportive team, and a comprehensive package designed to help you thrive.

Requirements

  • Maintains data quality of Risk Register and executes any required data clean-up exercises.
  • All CB employees are required to occasionally travel to meet in person for business purposes.

Nice to have

  • 5-7 years of experience managing or supporting IT Security Risk and Control Risk Register and processing policy exceptions.
  • Strong understanding of risk management techniques such as risk identification, risk scoring, risk mitigation, and risk tracking.
  • The capacity to assess risk information and make risk recommendations independently.
  • Excellent verbal and written communication skills.
  • Experience with governance, risk, and compliance tools (e.g., OneTrust ) preferred.
  • Experience with information security and privacy frameworks such as ISO 27001, COBIT, NIST-CSF, NIST 800-53, GDPR etc.
  • Current Information Security Certification (e.g., CISSP, CRISC, CISM, CISA, or related security certification) preferred or the ability to attain one within 6 months of hire.
  • Bachelor's degree in computer science, cybersecurity, engineering, IT management or four years equivalent IT and security industry experience.

Compensation

  • We're a self-sustaining nonprofit that believes in fair and competitive compensation grounded in your qualifications, experience, impact, and the market.

Benefits

  • You'll have open, transparent conversations about compensation, benefits, and what it's like to work at College Board throughout your hiring process.

Company info

  • This dedicated team facilitates information security governance and compliance by assessing College Board's vendors, reviewing and negotiating contractual commitments to information security, planning for disaster response and recovery, testing system strength using industry-recognized frameworks (ISO 27001, PCI-DSS and SOC2) and obtaining related compliance certifications, implementing information security policies, promoting security awareness and training, and testing the acumen of College Board employees through robust and innovative training and phishing campaigns.
  • About the Opportunity
  • As a Security Risk Analyst, you will have the critical role of being responsible for evaluating and managing exceptions to IT security policies, for managing the Organization's Risk and Control Issues Register (Risk Register), and for developing reports and metrics.
  • Your strong technical communication and negotiation skills will help you build relationships and collaborate with diverse stakeholders and reduce risk to the organization and ensure compliance.
  • Under the direction of management, you will manage the Risk Register and perform security policy exceptions to help the College Board understand its critical risks.
  • Maintains a customer-focused attitude in all interactions with customers and colleagues.
Apply directly at College Board →Create a free account for alerts like thisView College Board immigration profile

This listing is sourced directly from College Board's careers page and normalized into a canonical job model.