Cybersecurity Risk Analyst II

CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 43 million Members and a growing network of partners across the world, CLEAR's secure identity platform is transforming the way people live, work, and travel. Whether it’s at the airport, stadium, or throughout your everyday life, CLEAR unlocks the magic of frictionless experiences.

As a Cybersecurity Risk Analyst II, you'll help strengthen CLEAR's security posture by identifying, assessing, and reducing cyber risk across our products, technology, and third-party ecosystem. Partnering closely with Engineering, Product, Legal, Privacy, and Security teams, you'll influence risk-based decisions that protect millions of members while enabling secure innovation across CLEAR's identity platform.

What you'll do

• Own CLEAR's third-party risk management program end-to-end, including vendor security assessments, due diligence, and ongoing monitoring across our partner ecosystem
• Lead the cyber risk management lifecycle by identifying, assessing, prioritizing, and tracking risks through remediation
• Translate complex technical risk into clear, actionable recommendations that enable business and engineering leaders to make informed decisions
• Develop and maintain meaningful risk metrics, dashboards, and reporting that provide leadership with visibility into CLEAR’s evolving cyber risk posture
• Partner with Engineering, Product, Privacy, Legal, and Security teams to ensure security requirements are understood, implemented, and validated throughout the development lifecycle
• Identify and drive continuous process improvements that make risk management more scalable, efficient, and effective while reducing friction for internal stakeholders
• Support risk quantification initiatives by applying probabilistic and data-driven approaches to better measure, prioritize, and communicate risk

How you'll measure success

• Timely completion of third-party risk assessments and ongoing monitoring across CLEAR's partner ecosystem
• High-priority cyber risks are accurately prioritized and remediated through the enterprise risk management lifecycle
• Timely delivery of actionable cyber risk metrics and reporting that inform leadership decision-making
• Adoption of security requirements and risk mitigation controls across Engineering initiatives
• Reduced cyber risk assessment cycle times and expanded program coverage through process improvements
• Increased visibility into enterprise cyber risk across Security, Engineering, Product, Legal, Privacy, and Procurement

What you're great at

• 3-5+ years of experience in cybersecurity risk management or a similar role, ideally in industries requiring high levels of data privacy and protection (e.g., technology, finance, healthcare)
• Communicating complex technical and business risk clearly to both technical and non-technical a