risk-assessment jobs in San Diego

Lead cybersecurity strategy and transformation initiatives for enterprise clients as a Manager at Deloitte's Cyber team. Manage project workstreams, coach teams, and develop executive-level analyses and recommendations that address complex business challenges around cyber programs, governance, risk assessments, and enterprise change.…See more Collaborate across stakeholders to drive alignment, oversee high-quality deliverables, and support business development and practice growth in a consulting environment.

Manage cybersecurity and operations of multiple classified systems, including development and maintenance of enterprise-wide RMF security policies, continuous monitoring, and compliance with federal and DoD standards. Lead and mentor security personnel while overseeing System Security Plan creation, security audits, incident investigation, and risk assessments across complex networks and systems at multiple classification levels.…See more Maintain DoD 8570.01-M certification (CISSP, CISM, CCISO, or GSLC) and an active TS/SCI clearance, with 10+ years of professional experience in classified government environments.

As a Research Cybersecurity Analyst, you will review research contracts, proposals, and data-use agreements to identify security and compliance requirements, then conduct risk assessments and recommend practical safeguards. You will coordinate security controls across cloud and on-premises research environments, assess architectures for identity management, encryption, and network segmentation, and develop compliance documentation (SSPs, POA&Ms) for sponsor audits and CMMC readiness.…See more You will work with researchers, IT teams, and compliance partners to interpret regulatory requirements, map them to controls, and explain technical security obligations in practical terms to non-technical stakeholders. Experience in NIST frameworks, security assessments, vulnerability management, and regulated environments (higher education, research, healthcare, government, defense) is especially valued.

This role supports research teams at a university by reviewing security requirements in research contracts and proposals, conducting risk and compliance assessments, and recommending practical security approaches. The analyst will coordinate security controls across cloud and on-premises research environments, assess security architectures and configurations, and develop compliance documentation including SSPs and POA&Ms.…See more The role requires interpreting cybersecurity frameworks (NIST SP 800-171, CMMC, NIST SP 800-53) and communicating technical requirements to researchers and non-technical stakeholders across identity and access management, encryption, vulnerability management, and network security.

Systems Network Engineer II/III will design, implement, and support resilient network architectures across shipboard and enterprise environments while ensuring cybersecurity compliance and risk mitigation. The role requires assessing vulnerabilities, proposing remediation strategies, documenting configuration and architectural changes at engineering level, and coordinating approvals through engineering change and cybersecurity governance processes.…See more The person will support operational events with hands-on testing and implementation aboard ship, provide training to ship's force, and liaise across cloud, computer engineering, cybersecurity, and operational teams. A Bachelor's degree with 9+ years of network engineering, tactical networks, or related infrastructure experience is required, along with an active Secret clearance and ability to obtain TS/SCI.

Lead a team of security engineers (staff, senior staff, principal levels) owning product security across Intuit's ecosystem, including security reviews, design consults, and risk evaluations. Transform security processes from manual to automation/agent-first, defining baseline controls and security standards for cloud platforms (AWS, GCP, Azure) while raising the bar for AI/agentic systems.…See more Partner with business and engineering leaders to surface risks early, inform decisions, and drive adoption of security controls across large organizations. Requires 8+ years in security engineering, 3+ years managing managers, deep technical expertise in application security and threat modeling, and demonstrated experience rebuilding security programs with hands-on automation.

The IT Manager will lead all IT infrastructure, cybersecurity, and regulatory compliance operations for a healthcare organization. Key responsibilities include designing and maintaining secure cloud, network, and endpoint systems; serving as the HIPAA compliance authority; establishing incident response procedures; managing vendor and third-party risk; and providing executive advisory on technology strategy and risk.…See more The role demands extensive IT/cybersecurity leadership experience, deep HIPAA and healthcare data-protection expertise, and the ability to build compliance frameworks and security controls from the ground up.

Lead information security engineer responsible for designing and implementing comprehensive security architectures across ICW Group's IT and business technology infrastructure. Will conduct risk assessments, penetration tests, and security compliance reviews; partner with systems engineering and project management teams to ensure secure design throughout the development lifecycle; and lead remediation strategies for identified vulnerabilities.…See more Requires 10+ years of security engineering experience, AWS cloud security expertise (3–5 years preferred), and hands-on proficiency with IDS/IPS, firewalls, SIEM, forensics tools, and endpoint security solutions.

This role supports the full product lifecycle for complex integrated systems, focusing on requirements management, system integration, verification & validation, and risk management. The Systems Engineer will conduct FMEA and hazard analysis, collaborate across software, electrical, mechanical, quality, and regulatory teams, and drive activities from concept through launch.…See more The position requires 3+ years of systems engineering experience, a bachelor's degree in engineering, and expertise in requirements traceability and risk assessment.

Lead the security architecture for satellite onboard systems, designing secure boot chains, attestation mechanisms, and trust boundaries across hardware, firmware, and payload compute. You will conduct threat modeling, implement Hardware Root of Trust solutions (TPM, secure elements, eFuse), manage firmware signing processes, and develop incident response procedures for onboard system compromise.…See more The role requires close collaboration with hardware and firmware teams to embed security best practices throughout the platform development lifecycle, plus mentoring and recruiting for the security organization.

This role performs technical cybersecurity assessments and continuous monitoring oversight for Navy acquisition programs, evaluating program security posture, identifying technical risks and control weaknesses, analyzing findings to distinguish significant risks, and tracking remediation activities. The engineer will identify recurring cybersecurity trends across programs, assess the technical adequacy of proposed fixes, and communicate findings and recommendations to technical and program stakeholders.…See more The position requires a Bachelor's degree with 3+ years of cybersecurity experience, specialized knowledge of continuous monitoring principles and security controls, and the ability to analyze technical information to develop actionable recommendations.

Information Security Engineer III will lead security architecture reviews and threat modeling for data, analytics, AI, and cloud initiatives at an insurance company. The role involves designing and implementing security controls for AWS data platforms and AI/ML workloads, providing oversight of LLM usage and emerging AI threats, and mentoring engineering teams on secure development practices.…See more You will partner with Engineering, Cloud, Data, and Operations teams to embed security into system design, manage compliance with NIST, NYDFS, PCI DSS, and CPRA/CCPA standards, and evaluate third-party vendors and security tools. The position requires 8+ years of security engineering experience, 3-5 years in AWS cloud security, and expertise in threat modeling, risk assessment, and incident management.

Senior Software Engineering Manager responsible for leading software development teams and managing cost, schedule, and quality performance across all sub-cost center activities. The role requires overseeing the complete software development lifecycle from design through delivery, ensuring compliance with engineering procedures, quality standards, and security policies.…See more The ideal candidate will have 16+ years of software engineering experience, 8+ years in an engineering management role, and a proven track record of leading teams to meet milestones while managing budgets, resources, and technical specifications.

Director of IT seeking an experienced leader to oversee IT governance, compliance, and risk management for a biotech company. Responsibilities include drafting and maintaining IT policies aligned with regulations (GDPR, HIPAA, ISO 27001, FDA 21 CFR Part 11, SOX), leading internal and external audits, conducting risk assessments, developing IT quality management systems, and managing an IT team and budget.…See more The role requires 8+ years of IT experience with 3+ years in leadership, strong technical writing ability, and expertise in cloud platforms, network security, and data privacy.

The OT Security Engineer will conduct vulnerability assessments in industrial SCADA/ICS environments, using specialized tools like Nozomi, Claroty, and Tenable.ot to identify risks in PLCs, HMIs, and OT networks. Responsibilities include performing asset discovery, risk assessment, and security scanning, then providing remediation recommendations to engineering teams.…See more The role requires hands-on knowledge of OT network protocols, segmentation, firewalls, and industrial cybersecurity practices, with regular onsite collaboration with operational technology and engineering staff.

Sr Product Surveillance Engineer responsible for investigating postmarket software and device issues, driving complaint investigation processes, and ensuring regulatory compliance for medical devices. The role requires deep understanding of Dexcom's software architecture to evaluate product performance, apply structured problem-solving and statistical analysis to root-cause investigations, and communicate findings to technical and non-technical stakeholders.…See more You will support quality system activities (CAPA, HHEs), conduct software risk assessments, and partner with product and quality teams to translate postmarket insights into product improvements. Success requires demonstrated knowledge of FDA 21 CFR Part 820, IEC 62304, ISO 13485, ISO 14971, and medical device quality systems.

This role leads product security engineering for FDA-regulated medical devices (Class I/II) and their cloud-connected platforms. The engineer owns the full security lifecycle—threat modeling, risk assessments, security architecture, secure SDLC integration, and regulatory documentation—balancing patient safety, data protection, and FDA compliance.…See more Responsibilities span device and cloud security, vulnerability management, SBOM processes, and cross-functional collaboration with engineering, quality, and regulatory teams. Required: 5+ years cybersecurity experience, hands-on work with embedded/cloud/application security, FDA submission experience, and medical device development background.

The Information Security Analyst II will protect both operational technology (OT) and information technology (IT) environments at a pharmaceutical manufacturer. Responsibilities include securing industrial control systems, SCADA platforms, PLC-based automation, manufacturing execution systems, and enterprise endpoints; managing OT asset inventory and vulnerability remediation; implementing security controls and hardening standards; and supporting threat detection, incident response, and security assessments.…See more The role requires 3+ years in information security or system administration with direct OT/ICS/SCADA/manufacturing experience, working knowledge of Purdue Enterprise Reference Architecture and relevant standards (ISA/IEC 62443, NIST SP 800-82, NIST CSF 2.0), and hands-on experience with endpoint security, vulnerability management, and Windows/Active Directory administration.

Associate Systems Engineer supporting the development and enhancement of in-vitro diagnostic (IVD) instruments within a regulated medical device environment. The role involves system integration testing, verification and validation (V&V) activities, troubleshooting, failure investigations, and risk assessments across multiple R&D projects.…See more Responsibilities include executing statistical analyses, performing root cause analysis, contributing to design control documentation and regulatory submissions, and collaborating with cross-functional teams (software, hardware, assay development, quality, manufacturing). Requires a Bachelor's degree in Systems Engineering, Bioengineering, Mechanical Engineering, Electrical Engineering, or related field with 0–3 years of relevant experience; Master's preferred.

Support Computer System Validation (CSV) activities for GxP-regulated pharmaceutical and medical device systems, including validation planning, test execution, documentation, and compliance verification against FDA regulations and 21 CFR Part 11. Execute validation test scripts, document results and deviations, conduct impact and risk assessments, and collaborate with cross-functional teams to ensure systems meet regulatory and data integrity requirements.…See more Maintain validation records, support change control and CAPA activities, and identify compliance gaps in regulated computerized environments.

As an Information System Security Manager, you will oversee cybersecurity and operations of multiple classified systems, managing personnel and developing enterprise-wide RMF-based information security policies, standards, and procedures. You will maintain compliance with federal and DoD security standards, create and maintain System Security Plans, conduct continuous monitoring, perform risk assessments, and investigate security incidents.…See more You will coordinate with ISSEs, ISAs, and other security roles to design, procure, build, and accredit complex networks and systems across multiple classification levels. Required: Bachelor's degree in Information Security/IT or equivalent with 10+ years experience, DoD 8570.01-M IAM level III certification (CISSP, CISM, GSLC, or CCISO), RMF and NIST 800-53 expertise, and an active TS/SCI clearance.

Entarian seeks a DevSecOps Engineer to design and maintain a DevOps Platform supporting the U.S. Navy's software development and systems integration.…See more The role involves developing GitLab CI/CD pipelines, building Infrastructure-as-Code with Terraform on AWS and similar cloud platforms, automating Kubernetes configurations, and implementing security controls per DoD and NIST standards. Responsibilities include hardening base images, validating Information Assurance Controls, documenting processes, and collaborating across Agile teams to deliver secure, cloud-native infrastructure.

Lead complex audit workstreams for multi-system processes across governance, acquisition, development, operations, and information security. Design risk-based audit programs integrating data analysis and technology insights to test large populations, evaluate IT controls in enterprise applications, and assess third-party control reports.…See more Mentor team members, produce executive reporting, and drive continuous improvement of audit methodologies and tooling.

Senior Director and Chief of Staff role supporting the SVP and Head of Data Center Engineering at Qualcomm. Responsibilities include strategic planning across AI inference, server CPU, custom silicon, networking, and hardware systems; driving operating cadence and cross-functional execution; coordinating communication between engineering leadership and stakeholders; managing high-priority initiatives from concept through execution; and establishing KPIs and risk assessments to track organizational performance.…See more Requires 12+ years in business operations or engineering environments, with preferred experience in semiconductor, cloud, AI, or data center contexts.

Sr. Software Product Security role focused on monitoring, assessing, and responding to product and application security risks, vulnerabilities, and emerging cybersecurity threats.…See more Responsibilities include conducting security assessments, automating vulnerability testing, partnering with engineering teams to define security requirements, troubleshooting security issues across systems and applications, and providing technical guidance on cybersecurity best practices. Requires 4-15+ years of cybersecurity/product security experience, strong knowledge of vulnerability management and risk assessment, hands-on experience with security testing and application validation, and familiarity with secure software development practices. Security certifications (CISSP, Security+) preferred; experience in regulated industries or healthcare a plus.