Technical Risk Management - Risk Engineer I - Req #635

What we need… We're looking for a curious and motivated cybersecurity professional to join COCC's Technical Risk Management team. Technical Risk Management helps the organization make informed decisions about technology by evaluating security risks, reviewing controls, assessing vendors, and providing practical recommendations that enable the business to move forward securely. In this role, you'll work with a wide range of technologies including cloud services, applications, infrastructure, third-party solutions, and security tools while helping assess risk and support business innovation. You'll be part of a collaborative team that partners across the organization to solve problems, improve security, and continuously learn. This is an excellent opportunity to gain broad exposure to cybersecurity, technology risk, and regulatory requirements while building a well-rounded career. What’s in it for you.... COCC offers a collaborative environment, career growth, and all the benefits you’d expect from an award-winning employer, including: Health Insurance: Employees and their eligible dependents – including spouses, domestic partners, and children – are eligible for coverage from the first day of the month following hire, including medical, dental, and vision insurance, as well as ancillary benefits. COCC also contributes to employees’ health savings accounts (HSA). Retirement: COCC matches 100% for the first 3% and 50% for the next 2% that employees contribute to their 401(k). Additionally, COCC may make a discretionary annual contribution to the plan based upon the profitability of the company. Paid Time Off: COCC offers a generous PTO policy, including quarterly wellness days, paid holidays, and a birthday day off. Hybrid Schedule: Enjoy the flexibility of a hybrid work schedule designed to support work-life balance and personal well-being Training & Development: COCC offers robust employee development programs aligned with career pathing objectives, including cutting edge training and educational resources, as well as a tuition reimbursement program to support continued education. Recognition Programs: Be recognized and celebrated through employee appreciation and peer recognition programs. On-site Fitness Centers: Stay active and energized with convenient on-site fitness centers available to employees. Fuel Up: Monthly company-sponsored lunches discounted catered meals, and convenient on-site snacks. Additional Benefits: COCC offers employees a Lifestyle Spending Account (LSA) to support employees’ unique needs, as well as company-paid life insurance, wellness initiatives, and access to financial planning guidance from certified professionals. To learn more about our comprehensive benefit programs, please visit: https://www.cocc.com/careers/employment-benefits/ What you’ll do… Perform technical risk and control assessments for software, SaaS platforms, code packages, container images, external network connections, security exceptions, and contractor or vendor remote access requests. Support vulnerability, exposure, and recurring control reviews by validating findings, reviewing remediation evidence, tracking commitments, and documenting results for technology and physical security controls. Conduct technical reviews of third-party vendors by evaluating security questionnaires, penetration test results, assurance reports, certifications, architecture, and data handling practices. Support audits, regulatory examinations, client inquiries, and management reviews by gathering evidence, preparing responses, maintaining records, and tracking findings, risk acceptances, and remediation commitments. Identify opportunities to improve TRM processes, documentation, automation, reporting, and workload efficiency. What you’ll bring… Strong written and verbal communication skills with the ability to explain technical concepts and security risks to both technical and non-technical audiences Analytical mindset with the ability to evaluate information, identify risk, and make sound risk-based recommendations Ability to gather, analyze, and validate information from multiple sources to support sound risk-based decisions Strong attention to detail when reviewing technical documentation, security reports, configurations, and supporting evidence Ability to manage multiple assessments, requests, and priorities while maintaining accuracy and meeting deadlines Curiosity and desire to continuously learn new technologies, cybersecurity concepts, and industry best practices Collaborative approach with the ability to build effective working relationships across teams, vendors, and business partners Sound judgment, professionalism, and discretion when handling sensitive or confidential information Commitment to process consistency, documentation quality, and continuous improvement The salary range for this position is $53500-72300 annually. This is a hybrid role in Rocky Hill, CT