Cybersecurity Risk Analyst

Overview
We are looking for a proactive Cybersecurity Risk Analyst to join our team and drive actionable strategies that protect enterprise systems and data. The ideal candidate will translate complex security challenges into practical risk management solutions, helping the organization maintain a strong security posture while aligning with industry frameworks. This role offers the opportunity to make a measurable impact across IT, cloud environments, and vendor ecosystems.

Key Responsibilities

Risk Assessment & Analysis

• Conduct comprehensive cyber risk assessments across systems, applications, and third-party vendors to identify threats and vulnerabilities.

• Maintain and enhance the enterprise risk register, track remediation progress, and implement effective risk treatment plans.

• Lead or support cybersecurity risk projects, ensuring timely completion of milestones and deliverables.

Frameworks & Compliance

• Apply and maintain alignment with industry-leading frameworks such as NIST CSF, ISO 27001, CIS Controls, and COBIT.

• Contribute to the development and improvement of cybersecurity policies, standards, and procedures.

• Stay informed on regulatory changes and emerging threats to ensure compliance and strengthen security posture.

Reporting & Collaboration

• Generate clear, data-driven reports and dashboards to communicate risk exposure and trends to technical and business stakeholders.

• Collaborate with IT, compliance, and business units to embed risk management practices into daily operations and projects.

• Advise on risk implications of emerging technologies, including AI and cloud services.

Qualifications

• Proven experience in cybersecurity risk management, risk analysis, or compliance in corporate or regulated environments.

• Strong understanding of IT systems, network security, cloud environments, and data protection principles.

• Excellent communication, stakeholder management, and analytical skills.

• Ability to drive initiatives independently with ownership and accountability.

Preferred Qualifications

• Certifications such as CRISC, CISSP, CISM, or ISO 27001 Lead Implementer.

• Experience with risk assessment tools, GRC platforms, and vulnerability management solutions.

• Knowledge of cloud security principles and risk considerations for public cloud providers.

• Awareness of cyber risk implications of emerging technologies like AI.

Why Join Us

• Work in a diverse, equitable, and inclusive environment that values your expertise and perspective.

• Play a key role in shaping cybersecurity strategy and mitigating risks for enterprise systems and cloud environments.

• Engage with cross-functional teams and grow professionally while making a meaningful impact.