Executive Assistant-Information Security & Risk Operations

We firmly believe that our employees drive the success of the company! With success in mind as the ultimate goal, we strive to create and provide an environment that offers challenging, stimulating and financially rewarding opportunities. We are looking for The Right One to join our team!

What's In It For You?

• Competitive Salary with Bonus Opportunities

• Paid Time Off

• Comprehensive Medical, Dental and Vision Benefits (Low Premiums!)

• Flexible Spending and Health Savings Accounts

• 14 Paid Company Holidays

• 401(k) with Company Contribution

• Educational Tuition Reimbursement

Summary

The Executive Assistant, Information Security Operations provides high-impact operational, financial, and administrative support to the Information Security and Enterprise Risk teams. This role owns the annual budget compilation process through structured interviews with security leadership, delivers monthly budget-to-actual analytics and year-over-year trending, leads variance review discussions with stakeholders, and proposes next steps grounded in data. The position also manages contract renewals and onboarding for cybersecurity MSAs, coordinates information for corporate insurance renewal programs, handles first-line insurance inquiries and COI distribution, and oversees Total Cost of Risk (TCOR) process management. The role has no independent decision-making authority but is accountable for research, analysis, and well-reasoned recommendations to drive informed decisions.

What You'll Do

• Financial Planning, Budgeting, and Analytics: Lead the annual security budget compilation process by conducting structured interviews with security management and enterprise risk stakeholders to accurately capture initiatives, run-rate costs, headcount needs, and capital or operating splits. Validate assumptions, timelines, and dependencies; document rationale and risk ranges. Deliver monthly budget-to-actual reporting and analytics. Produce variance analyses (volume, rate, timing, and scope drivers) and year-over-year trending. Create dashboards and executive-ready summaries highlighting key insights, risks, and required actions.
• Variance Reviews and Financial Tracking: Facilitate monthly variance reviews by coordinating agendas, consolidating cross-functional inputs, and leading discussions with management regarding budget variances. Propose corrective actions, re-forecasts, or reprioritization based on data and stakeholder input. Maintain financial calendars, close timelines, and deliverable trackers with Finance. Track savings initiatives (contract consolidations, license optimization, scope right-sizing) and realized benefits. ​

• Contracts, Vendor Management, and Procurement Support: Fully manage renewals and onboarding workflows for cybersecurity Master Services Agreements (MSAs). Coordinate directly with Legal, Procurement, and Security Subject Matter Experts (SMEs) on contract terms, Statements of Work (SOWs), Service Level Agreements (SLAs), data protection addenda, and risk assessments. Maintain a centralized repository of contract artifacts, expiration dates, and required notice periods. Support the end-to-end vendor lifecycle by intaking requests, assembling due diligence materials, shepherding reviews through approval workflows, and monitoring performance metrics to flag issues. Prepare negotiation packets with spend history, utilization data, benchmarks, and risk considerations.

• Risk, Compliance, Insurance, and TCOR Oversight: Support the corporate insurance renewal process by gathering critical security and risk data for underwriting, including controls, historical incidents, audit results, and overall compliance posture. Coordinate responses to first-line insurance inquiries and manage the distribution of Certificates of Insurance (COIs). Oversee Total Cost of Risk (TCOR) process management by defining core components such as premiums, retentions, claims, incident response, downtime, third-party costs, and mitigation investments. Build and maintain a dynamic TCOR model to report quarterly trends to leadership, partnering with Risk Management to align these insights with budget and vendor decisions. Enable compliance by assisting with evidence collection for audits and assessments—such as SOC 2, ISO 27001, and NIST CSF mapping—while maintaining a calendar for attestations and renewals.

• Executive, Operational, and Program Support: Provide high-level calendar management, meeting coordination, and communications support to security leadership. Prepare executive-ready materials, briefings, Quarterly Business Reviews (QBRs), and board or C-suite packets using clear narratives and clean visuals. Coordinate cross-functional initiatives and track key deliverables using roadmaps, milestones, and risk logs. Standardize and continuously improve operations by creating and updating RACI matrices, Standard Operating Procedures (SOPs), templates, intake forms, and trackers. Safeguard the absolute confidentiality of sensitive security, legal, and financial information.

• Stakeholder Engagement and Communication: Serve as the central point of coordination between Security, Enterprise Risk, and external vendors. Translate complex technical and security concepts into clear, action-oriented business language for non-technical stakeholders. Maintain active status updates, issue logs, and decision registers to ensure transparency and consistent follow-through across teams.

What You Need

Work Experience:

• 3–5+ years in executive assistant, business operations, finance/FP&A analyst, vendor management, procurement, or PMO support roles; experience within Information Security, IT, or Enterprise Risk strongly preferred.

• Demonstrated experience with budget compilation, variance analysis, and executive reporting. Hands-on experience with contract administration (MSAs, SOWs) and vendor onboarding/renewal workflows.

• Exposure to corporate insurance processes and TCOR concepts is strongly preferred

Licenses and Certifications:

• Progress toward Certified Associate in Project Management (CAPM), Certified in Risk and Information Systems Control (CRISC), or equivalent risk/project certifications preferred.

Knowledge, Skills & Abilities:

• Knowledge: Basic understanding of cybersecurity functions (e.g., vulnerability management, SOC, identity, GRC) and how they drive spend. Familiarity with security frameworks (NIST CSF, ISO 27001) and audit/attestation basics (SOC 2). Contract terminology (MSA, SOW, SLA, DPA, indemnification, termination, renewal/auto-renewal) and procurement workflows. Insurance and TCOR fundamentals (premiums, retentions, claims drivers, loss control).
• Skills: Financial analysis: budget-to-actuals, variance decomposition, trend analysis, and forecasting. Executive communications: concise memos, decision briefs, and visually clear dashboards. Project coordination: meeting facilitation, timeline management, dependency tracking. Vendor/contract administration: document control, renewal calendars, and approval routing. Research and synthesis: quickly gather facts, validate sources, and distill insights.
• Abilities: Operate with high discretion handling sensitive information. Influence without authority; lead structured discussions and drive closure on action items. Context switch across executive support, financials, and compliance tasks without loss of rigor. Anticipate needs, identify process gaps, and implement pragmatic improvements

Travel:

• Less than 10% Travel Required

Shift Time

Pay
 

Our company is proud to be an equal opportunity employer! It is the policy and commitment of the company to maintain a work environment that provides equal employment opportunity (EEO) for all its employees and applicants. We are committed to providing equal employment opportunities without regard to race, color, ethnicity, religion, sex, sexual orientation, gender identity, pregnancy, national origin, age, marital/domestic partner status, veteran status, disability, genetic information or any other applicable lawfully protected basis. This policy applies to all terms and conditions of employment.

We seek to employ individuals qualified for a position by virtue of job-related educational standards, training, experience, and personal qualifications.