Cyber Risk Analyst

Job Summary

A company is looking for a Cyber Risk & Controls Analyst to support cybersecurity governance and risk management processes.

Key Responsibilities

• Perform cybersecurity process level RCSAs in partnership with business function owners and stakeholders
• Implement risk and controls assessment results and support remediation planning by documenting gaps and recommendations
• Evaluate cybersecurity risks and controls against Enterprise Policies, regulatory requirements, and industry standards

Required Qualifications

• Bachelor's degree and 6 years of experience in cybersecurity, risk management, or a related field, or High School Diploma/GED and 10 years of experience
• Experience performing risk assessments and RCSAs in the technology or cybersecurity field
• Working knowledge of cybersecurity processes and relevant risk taxonomies
• Experience with frameworks such as NIST CSF and NIST SP 800-53
• Ability to write clear, actionable risk and control descriptions and assessment findings