Cyber Resiliency Analyst / Senior Technology Risk Analyst
Job Type: 5 months Contract Position. Through March 31, 2027
Location:Remote(RST)
Job Description
Project Overview
We are seeking an experienced Cyber Resiliency Analyst / Senior Technology Risk Analyst to support a Cyber Resiliency Audit and Remediation Planning project..
The resource will assess cyber resiliency across various SaaS solutions, identify gaps related to data protection and recovery, configuration resilience, identity dependencies, disaster recovery, and vendor business continuity, and help develop a prioritized remediation roadmap.
The selected individual will work closely with an existing Project Manager and independently manage assigned assessment activities, stakeholder discussions, documentation, and project deliverables.
Key Responsibilities
Conduct cyber resiliency and technology risk assessments across various SaaS applications and platforms.
Assess data protection, backup, recovery capabilities, disaster recovery procedures, RTO/RPO requirements, and business continuity plans.
Review identity and access management dependencies, including SSO, MFA, and privileged access.
Evaluate SaaS configurations, security controls, and architecture from a resiliency and risk perspective.
Assess third-party/vendor risk, including vendor business continuity, disaster recovery, and service availability commitments.
Identify gaps, operational dependencies, and potential business risks affecting SaaS resiliency.
Conduct discovery sessions and collaborate with business application owners, technical teams, security stakeholders, and external SaaS vendors.
Gather relevant information, ask appropriate questions, manage follow-ups, and document assessment findings.
Develop risk-based findings, evaluate potential business impacts, and recommend appropriate remediation priorities.
Prepare and maintain risk registers, assessment reports, remediation plans, and executive-ready presentations.
Work independently to manage assigned responsibilities, track open items, and ensure deliverables are completed on time.
Collaborate with the existing Manager, providing regular updates on assessment progress, findings, risks, and outstanding activities.
Required Skills and Qualifications
Experience in Cyber Resiliency, Technology Risk Assessment, IT Risk Management, Cybersecurity Risk, or Business Continuity assessments.
Good understanding of SaaS security, data protection, backup and recovery, disaster recovery, and business continuity.
Knowledge of identity and access management concepts, including SSO, MFA, and privileged access management.
Understanding of SaaS security configurations, security controls, and architecture reviews.
Experience with vendor risk management, third-party assessments, and vendor resiliency evaluations.
Ability to identify technology risks, document assessment findings, and develop risk-based remediation recommendations.
Excellent verbal and written communication skills.
Experience conducting discovery sessions and interacting with business and technical stakeholders.
Strong documentation and presentation skills, including preparing reports for business and technical leadership.
Ability to work independently, take ownership of assigned activities, manage follow-ups, and deliver results with minimal supervision.
Important Candidate Expectations
This is an individual contributor role, not a people management or technical architecture position.
The ideal candidate should be capable of independently conducting assessments, coordinating discovery sessions, interacting with different stakeholders, identifying and documenting resiliency gaps, and preparing professional assessment reports and remediation recommendations.
The individual will work alongside the existing Manager, who will provide overall project direction and support. Deep hands-on engineering expertise is not required; strong assessment, communication, analytical, and documentation skills are more important.
