Senior Analyst, Cyber and Information Security Risk Management: 

The Senior Analyst, Cyber and Information Security Risk Management role demands business insight, subject matter expertise, decisiveness, tact, courage, relationship management skills, technical acuity, sound professional judgment, and the ability to effectively communicate with audiences at all levels, both inside and outside of the organization.

How You Will Make a Difference:  

1.       Collaborate with information technology and other business unit personnel to identify cybersecurity risks associated with highly complex projects and other business initiatives.

2.       Perform assessments of external party information security controls to ensure they meet or exceed our information security risk management requirements for the services to be provided.

3.       Determine information security risk profiles for various vendor and business partner services using questionnaires, relevant industry best practices and standards, and knowledge of our policies.

4.       Recommend solutions to eliminate, reduce, or mitigate cybersecurity risk, and communicate said solutions to external parties and/or internal business stakeholders as appropriate.

5.       Provide direction and guidance as needed to internal project stakeholders concerning statutory, regulatory, and our policy and program requirements.

6.       Record pertinent documentation and communications for all assessments in our online information technology risk management platform.

7.       Report status of engagements to Global Cyber and Information Security management, project managers, and other business stakeholders as appropriate. 

POSITION DESCRIPTION

8.       Assist in enforcing information security policies, standards, and procedures.  Review requests for exceptions to security policies and provide recommendations to management.

9.       Research and advocate new technologies, architectures, and products that will support security requirements for the enterprise and its customers, business partners, and vendors.

10.    Provide cybersecurity risk management and process execution guidance to junior team members.

11.    Perform other information security risk management tasks as assigned.

Years of Related Professional Experience: 5+ years 

Educational/ Position Requirements:  

•       5+ years of information security risk management and/or IT audit experience, preferably in a large corporate enterprise.

•       Bachelor’s degree in information systems, computer science, or related field preferred.

•       Certified Information Systems Security Professional (CISSP) preferred. Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC) or similar credentials considered.

•       Functional knowledge of industry frameworks, regulations, legislation, and audit methodologies, including SOC 1, SOC 2, ISO 27000, SIG, CAIQ, NIST Cybersecurity Framework, Sarbanes-Oxley (SOX), PCI-DSS, GDPR, and various federal and state privacy laws.

•       Ability to broker complex discussions to achieve the proper balance between business needs and cybersecurity best practices.

•       Ability to influence others through persuasion to arrive at desired outcomes.

•       Ability to communicate effectively with a broad range of people and roles, including vendors, information technology professionals, and other business personnel.

•       Ability and desire to seize the initiative, work proactively, and perform assigned duties in a highly independent manner.  


Horizontal facilitates valuable and productive conversations between you and potential employers. We can assist you in growing your career by partnering you with employers that offer challenging assignments. For those that join the team, we offer competitive compensation and benefits including medical, dental, vision, and retirement. Check out all we have to offer and how you can become part of the Horizontal Talent Team. The pay range for this role is $49 - $85 per hour. This is not a guarantee of compensation, as final offer amount may vary based on factors including but not limited to experience and geographic location.