Overview
Skills
Job Details
Job Title: Cyber Risk Analyst
Location: San Antonio, TX
Experience: 6-8 Years
Role Overview
The Cyber Risk Analyst will play a critical role in evaluating, mitigating, and monitoring technology and cyber risks across the organization. This role requires strong analytical capabilities, clear communication with senior leadership, and a solid understanding of risk frameworks and assessment methodologies. The analyst will drive risk assessments, manage gaps and issues, and ensure alignment with enterprise security standards.
Key Responsibilities
Risk Assessment & Analysis
-
Conduct detailed cyber and technology risk assessments across applications, infrastructure, and business processes.
-
Identify control weaknesses, vulnerabilities, and emerging threats.
-
Evaluate residual risk and provide clear recommendations.
Risk Mitigation & Gap Management
-
Collaborate with cross-functional teams to develop and track mitigation plans.
-
Perform gap analysis against regulatory and organizational standards.
-
Monitor remediation progress ensuring timely closure.
Issue Management
-
Maintain end-to-end oversight of identified issues and risks.
-
Validate evidence for issue closure and ensure alignment with compliance requirements.
-
Prepare detailed documentation and reports for audit readiness.
Senior Leadership Reporting & Communication
-
Present risk findings, trends, and recommendations to senior leaders and risk committees.
-
Prepare concise reports, dashboards, and executive summaries.
-
Advise leadership on risk impact and priority.
Documentation & Governance
-
Review and update risk documentation, policies, and procedures.
-
Ensure all assessments, artifacts, and evidence are compliant with governance frameworks.
-
Support governance, risk, and compliance (GRC) activities.
Required Skills
-
6-8 years of experience in Cyber Risk, IT Risk, or InfoSec domains.
-
Strong understanding of risk assessment methodologies (NIST, ISO 27001, SOC, etc.).
-
Hands-on experience with issue tracking, gap analysis, and mitigation management.
-
Excellent written and verbal communication especially with senior leadership.
-
Ability to review and interpret technical documentation, architecture diagrams, and security controls.
-
Strong analytical mindset with attention to detail.