Cyber Risk Analyst

A company is looking for a Cyber Risk & Controls Analyst to support cybersecurity governance and risk management processes.

Key Responsibilities

Perform cybersecurity process level RCSAs in partnership with business function owners and stakeholders

Implement risk and controls assessment results and support remediation planning by documenting gaps and recommendations

Evaluate cybersecurity risks and controls against Enterprise Policies, regulatory requirements, and industry standards

Required Qualifications

Bachelor's degree and 6 years of experience in cybersecurity, risk management, or a related field, or High School Diploma / GED and 10 years of experience

Experience performing risk assessments and RCSAs in the technology or cybersecurity field

Working knowledge of cybersecurity processes and relevant risk taxonomies

Experience with frameworks such as NIST CSF and NIST SP 800-53

Ability to write clear, actionable risk and control descriptions and assessment findings