Senior Cyber Risk and Vulnerability Analyst - Hybrid in IL

Job Posting Title - Senior Cyber Risk and Vulnerability Analyst

I2-3 days onsite
 
Job Description Summary - We are seeking a skilled and motivated Senior Cyber Risk and Vulnerability Analyst to strengthen our cybersecurity risk management and vulnerability management capabilities. This role will conduct security risk assessments, support risk quantification and reporting, coordinate vulnerability remediation, and provide security consultation to business and technology stakeholders. The analyst will also contribute to security awareness and day-to-day operational security activities that help maintain a secure and resilient environment.

Requirements:
Bachelor’s degree in cybersecurity, information technology, or a related field, or an equivalent combination of education and relevant experience. Relevant security or cloud certifications, such as Security+, Microsoft Azure, or AWS certifications, are preferred.
Five or more years of relevant experience in cybersecurity, technology risk, vulnerability management, security governance, or a related field, including demonstrated experience conducting security risk assessments and coordinating remediation activities.
Security risk assessment experience:Working knowledge of NIST CSF, NIST SP 800-53, ISO 27001, CIS Controls, or comparable security and control frameworks.
Experience evaluating technical and administrative controls.
Experience applying qualitative or quantitative methods to assess, prioritize, and communicate security risk.
Strong documentation and report-writing skills.
Ability to communicate risk to non-technical audiences.

Experience with vulnerability scanning tools such as Nexpose, Qualys or Nessus or similar vulnerability management platforms
Vulnerability management or remediation-governance experience
Experience developing and tracking remediation plans in partnership with technical teams
Excellent analytical and problem-solving skills.
Be a clear and confident public speaker, able to tailor messaging around technical concepts to diverse audiences. 
Ability to quickly learn new processes and tools
Ability to think critically, ask thoughtful questions, and challenge assumptions in a constructive manner.
Naturally curious and driven to understand how technologies, applications, and business processes operate.