Cybersecurity Risk Analyst II

CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier-physically and digitally. With more than 43 million Members and a growing network of partners across the world, CLEAR's secure identity platform is transforming the way people live, work, and travel. Whether it’s at the airport, stadium, or throughout your everyday life, CLEAR unlocks the magic of frictionless experiences.

As a Cybersecurity Risk Analyst II, you'll help strengthen CLEAR's security posture by identifying, assessing, and reducing cyber risk across our products, technology, and third-party ecosystem. Partnering closely with Engineering, Product, Legal, Privacy, and Security teams, you'll influence risk-based decisions that protect millions of members while enabling secure innovation across CLEAR's identity platform.

What you'll do:

• Own CLEAR's third-party risk management program end-to-end, including vendor security assessments, due diligence, and ongoing monitoring across our partner ecosystem
• Lead the cyber risk management lifecycle by identifying, assessing, prioritizing, and tracking risks through remediation
• Translate complex technical risk into clear, actionable recommendations that enable business and engineering leaders to make informed decisions
• Develop and maintain meaningful risk metrics, dashboards, and reporting that provide leadership with visibility into CLEAR’s evolving cyber risk posture
• Partner with Engineering, Product, Privacy, Legal, and Security teams to ensure security requirements are understood, implemented, and validated throughout the development lifecycle
• Identify and drive continuous process improvements that make risk management more scalable, efficient, and effective while reducing friction for internal stakeholders
• Support risk quantification initiatives by applying probabilistic and data-driven approaches to better measure, prioritize, and communicate risk

How you'll measure success:

• Timely completion of third-party risk assessments and ongoing monitoring across CLEAR's partner ecosystem
• High-priority cyber risks are accurately prioritized and remediated through the enterprise risk management lifecycle
• Timely delivery of actionable cyber risk metrics and reporting that inform leadership decision-making
• Adoption of security requirements and risk mitigation controls across Engineering initiatives
• Reduced cyber risk assessment cycle times and expanded program coverage through process improvements
• Increased visibility into enterprise cyber risk across Security, Engineering, Product, Legal, Privacy, and Procurement

What you're great at:

• 3-5+ years of experience in cybersecurity risk management or a similar role, ideally in industries requiring high levels of data privacy and protection (e.g., technology, finance, healthcare)
• Communicating complex technical and business risk clearly to both technical and non-technical audiences
• Partnering with Engineering teams by asking thoughtful questions, understanding technical architectures, and challenging assumptions to improve security outcomes
• Staying organized and effectively balancing multiple priorities in a fast-paced, cross-functional environment
• Thriving in ambiguity by building structure, driving clarity, and delivering practical solutions
• Applying analytical and critical thinking skills to quickly understand new technologies, systems, and business domains
• Leveraging quantitative reasoning to support risk-based decision making; experience with FAIR or other cyber risk quantification frameworks is a plus

How You'll be Rewarded:

At CLEAR, we help YOU move forward - because when you’re at your best, we’re at our best. You’ll work with talented team members motivated by our mission of making experiences safer and easier. Our offices are bright and energetic with an open concept and plenty of conference rooms and casual co-working spaces. We also offer catered lunches every day and have fully stocked kitchens. Outside of the office, we invest in your well-being and learning & development with stipends and reimbursement programs. 

We offer holistic total rewards, including comprehensive healthcare plans, family-building benefits (fertility and adoption/surrogacy support), flexible time off, annual wellness stipend, free OneMedical memberships for you and your dependents, a CLEAR Plus membership, and a 401(k) retirement plan with employer match. The base salary range for this role is $119,000 - $140,000, depending on levels of skills and experience.

The base salary range represents the low and high end of CLEAR’s salary range for this position. Salaries will vary depending on various factors which include, but are not limited to location, education, skills, experience and performance. The range listed is just one component of CLEAR’s total compensation package for employees and other rewards may include annual bonuses, commission, Restricted Stock Units. 

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status or other characteristics protected by law.

CLEAR provides reasonable accommodation to qualified individuals with disabilities or protected needs. Please let us know if you require a reasonable accommodation to apply for a job or perform your job. Examples of reasonable accommodation include, but are not limited to, time off, extra breaks, making a change to the application process or work procedures, policy exceptions, providing documents in an alternative format, live captioning or using a sign language interpreter, or using specialized equipment.

We are committed to a transparent and secure hiring process. All communications related to this role will come directly from a CLEAR employee through valid CLEAR channels (e.g., a valid @clearme.com email address or verified CLEAR LinkedIn profile). We encourage candidates to remain alert to job scams and to report any suspicious activity.