Cybersecurity Risk Analyst II

CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 43 million Members and a growing network of partners across the world, CLEAR's secure identity platform is transforming the way people live, work, and travel. Whether it’s at the airport, stadium, or throughout your everyday life, CLEAR unlocks the magic of frictionless experiences. As a Cybersecurity Risk Analyst II, you'll help strengthen CLEAR's security posture by identifying, assessing, and reducing cyber risk across our products, technology, and third-party ecosystem. Partnering closely with Engineering, Product, Legal, Privacy, and Security teams, you'll influence risk-based decisions that protect millions of members while enabling secure innovation across CLEAR's identity platform. What you'll do: Own CLEAR's third-party risk management program end-to-end, including vendor security assessments, due diligence, and ongoing monitoring across our partner ecosystem Lead the cyber risk management lifecycle by identifying, assessing, prioritizing, and tracking risks through remediation Translate complex technical risk into clear, actionable recommendations that enable business and engineering leaders to make informed decisions Develop and maintain meaningful risk metrics, dashboards, and reporting that provide leadership with visibility into CLEAR’s evolving cyber risk posture Partner with Engineering, Product, Privacy, Legal, and Security teams to ensure security requirements are understood, implemented, and validated throughout the development lifecycle Identify and drive continuous process improvements that make risk management more scalable, efficient, and effective while reducing friction for internal stakeholders Support risk quantification initiatives by applying probabilistic and data-driven approaches to better measure, prioritize, and communicate risk How you'll measure success: Timely completion of third-party risk assessments and ongoing monitoring across CLEAR's partner ecosystem High-priority cyber risks are accurately prioritized and remediated through the enterprise risk management lifecycle Timely delivery of actionable cyber risk metrics and reporting that inform leadership decision-making Adoption of security requirements and risk mitigation controls across Engineering initiatives Reduced cyber risk assessment cycle times and expanded program coverage through process improvements Increased visibility into enterprise cyber risk across Security, Engineering, Product, Legal, Privacy, and Procurement What you're great at: 3-5+ years of experience in cybersecurity risk management or a similar role, ideally in industries requiring high levels of data privacy and protection (e.g., technology, finance, healthcare) Communicating complex technical and business risk clearly to both technical and non-technical audiences Partnering with Engineering teams by asking thoughtful questions, understanding technical architectures, and challenging assumptions to improve security outcomes Staying organized and effectively balancing multiple priorities in a fast-paced, cross-functional environment Thriving in ambiguity by building structure, driving clarity, and delivering practical solutions Applying analytical and critical thinking skills to quickly understand new technologies, systems, and business domains Leveraging quantitative reasoning to support risk-based decision making; experience with FAIR or other cyber risk quantification frameworks is a plus How You'll be Rewarded: At CLEAR, we help YOU move forward - because when you’re at your best, we’re at our best. You’ll work with talented team members motivated by our mission of making experiences safer and easier. Our offices are bright and energetic with an open concept and plenty of conference rooms and casual co-working spaces. We also offer catered lunches every day and have fully stocked kitchens. Outside of the offi…