Information Security Risk Analyst

Job Summary

A company is looking for an Information Security Risk Analyst to identify, assess, track, and communicate information security risks across the organization.

Key Responsibilities

• Identify and translate inherent and residual risks, and manage enterprise information security risk assessments
• Lead third-party security risk assessments and maintain an information security risk register
• Develop and lead enterprise security awareness training initiatives

Required Qualifications

• 4 - 6 years of experience in information security, cybersecurity, or risk management
• Experience managing enterprise/third-party risk assessments and security training programs
• Experience supporting compliance audits and certifications, including NIST 800-53 and ISO 27001
• Security+, GSEC, or equivalent certification preferred
• Bachelor's degree in Cybersecurity, Information Security, or a related field preferred