Cybersecurity Risk Analyst

Location-Remote

Job Summary

We are seeking a Cybersecurity Risk Analyst to identify, assess, and manage cybersecurity risks across the organization's IT environment. The ideal candidate will support risk assessments, compliance initiatives, security governance, and risk mitigation efforts while ensuring alignment with business objectives and industry standards.

Key Responsibilities

• Conduct cybersecurity risk assessments for systems, applications, and cloud environments.
• Identify, evaluate, and document security risks, vulnerabilities, and potential business impacts.
• Develop and maintain risk registers, risk treatment plans, and mitigation strategies.
• Support security governance, risk, and compliance (GRC) initiatives.
• Monitor compliance with cybersecurity policies, standards, and regulatory requirements.
• Collaborate with IT, security, and business stakeholders to implement effective risk controls.
• Assist with third-party/vendor security risk assessments.
• Support internal and external security audits and compliance reviews.
• Track remediation activities and validate the effectiveness of implemented controls.
• Prepare risk reports, dashboards, and presentations for management and stakeholders.
• Stay informed about emerging cybersecurity threats, vulnerabilities, and regulatory changes.

Required Skills

• Knowledge of cybersecurity principles, risk management, and security controls.
• Understanding of cybersecurity frameworks such as NIST Cybersecurity Framework, ISO/IEC 27001, CIS Controls, or COBIT.
• Familiarity with Governance, Risk, and Compliance (GRC) processes and tools.
• Understanding of cloud security concepts (AWS, Azure, or Google Cloud Platform).
• Knowledge of vulnerability management and security assessment methodologies.
• Strong analytical, problem-solving, and documentation skills.
• Proficiency in Microsoft Office, particularly Excel and PowerPoint.
• Excellent written and verbal communication skills.

Preferred Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field.
• Experience supporting compliance initiatives such as ISO 27001, SOC 2, PCI DSS, HIPAA, or GDPR.
• Familiarity with risk assessment methodologies and audit processes.
• Experience with GRC platforms such as ServiceNow GRC, Archer, or OneTrust.