IT Risk Analyst

IT Risk Analyst

• 5-8 years of Cybersecurity Risk Management
• IT Risk Analyst experience at a large public company
• Experience setting rick tolerance and thresholds
• Exceptional communication skills
• Experience with ServiceNow IRM or comparable

Required Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Information Systems, Risk Management, Business, or a related field.
• 5-8+ years of experience in cybersecurity risk management, technology risk, governance, risk and compliance (GRC), or operational risk.
• Demonstrated experience establishing risk tolerance levels, thresholds, and decision-making criteria within a risk management program.
• Proven experience developing, maintaining, and governing enterprise risk registers.
• Experience designing, implementing, or maturing a comprehensive risk management lifecycle and supporting operational processes.
• Experience assessing and prioritizing technology and cybersecurity risks across enterprise environments.
• Strong analytical and problem-solving skills with the ability to evaluate complex risk scenarios.
• Excellent written and verbal communication skills, including the ability to create executive-level risk reports, presentations, and recommendations.

o Hands-on experience with one or more GRC platforms (ServiceNow IRM, RSA Archer, OneTrust, LogicGate, MetricStream, Or similar workflow and governance solutions)

Preferred Qualifications

• Professional certifications such as:

o CRISC (Certified in Risk and Information Systems Control)

o CISSP (Certified Information Systems Security Professional)

o CISM (Certified Information Security Manager)

o CGRC (Certified in Governance, Risk and Compliance)

o CISA (Certified Information Systems Auditor)

• Experience supporting cloud environments such as Azure, AWS, or Google Cloud.
• Knowledge of industry frameworks including:

o NIST Cybersecurity Framework

o NIST 800-53

o ISO 27001

o COBIT

o FAIR

o CIS Controls