Cybersecurity Risk Analyst

Job Title: Cybersecurity Risk Analyst
Location: Manassas, VA (100% onsite for 6 months. After the contract period once full-time, 3-days onsite & 2-days remote)
Duration: 6 months contract to hire

Note: We are looking for someone who can immediately contribute to the operational execution of our cybersecurity governance programs, including Third-Party Risk Management (TPRM), vendor risk assessments, executive Power BI dashboards, business-facing cybersecurity operations, and cross-functional stakeholder engagement.

SUMMARY:
Our client is seeking a results-driven and analytically minded Cybersecurity Risk Analyst to serve a dual mission within the Cybersecurity team: owning Third-Party Risk Management (TPRM) operations and supporting the organization's broader Cyber Governance & Risk. The successful candidate will be the subject matter expert (SME) for Client's TPRM program, currently administered through the SAFE platform, and will be equally responsible for insider threat monitoring, custom cybersecurity awareness training development, awareness metrics reporting, Disaster Recovery (DR) coordination, and executive-level risk reporting.
This role demands a practitioner who can translate technical risk data into clear business intelligence, build compelling Power BI dashboards and reports for leadership, and collaborate effectively across IT, Operations, and Procurement. The ideal candidate brings hands-on TPRM experience, strong data visualization skills, and a passion for building programs that protect Client's members, infrastructure, and operational continuity.

Must Haves:
Third-Party Risk Management (TPRM) or Cybersecurity Governance/GRC
Power BI (building dashboards, KPIs, executive reporting)
Power Platform (Power Automate / Power Apps)
Cybersecurity Risk Assessments
Strong communication with business stakeholders
Process improvement / workflow automation

MINIMUM QUALIFICATIONS:
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Risk Management, or a closely related field.
Equivalent combination of education and demonstrated professional experience will be considered.

Experience:
Minimum 3 5 years of progressive experience in cybersecurity, IT risk management, or a related GRC discipline.
Demonstrated experience operating or administering a formal TPRM program or third-party risk platform.
Proven ability to build Power BI reports and dashboards that translate security data into executive-ready metrics.
Experience developing and delivering cybersecurity awareness training and reporting program metrics.
Familiarity with Disaster Recovery planning, tabletop exercises, or DR test coordination.
Experience in a regulated industry (electric utility, energy, financial services, or healthcare) preferred.