Cybersecurity Risk Analyst

Quick Facts

• Role: Cybersecurity Risk Analyst

• Focus: Application and third-party risk assessments and GRC-aligned reporting

Description

Perform technical assessments of application and external vendor risk to identify cyber, operational, and regulatory threats. Work with Agile product teams and GRC to implement technical remediation that aligns with GIS policies and regulatory standards, including threat modeling and creation of detailed risk assessment reports. Support automated quantitative/qualitative risk analytics and maintain compliance evidence for SOC 2, ISO 27001, PCI DSS, and NIST CSF 2.0.

Responsibilities

• Conduct technical application and third-party risk assessments

• Collaborate with product teams (Agile) and GRC to implement remediation aligned to policies and regulatory requirements

• Prepare detailed risk assessment reports for business unit owners, highlighting key risks and exceptions

• Assist in developing and implementing risk exception plans and strategies

• Support automated risk analytics and reporting processes

• Coordinate with internal/external auditors and provide compliance documentation/evidence

• Support security-product and regulatory landscape change management, updating security policies/standards/technical requirements as needed

• Support execution of the broader GIS security program aligned to strategy and key metrics

Requirements

• 5+ years of information security experience with relevant education

• Strong analytical and critical thinking

• Excellent communication skills (listening, data gathering, clear articulation)

• Self-motivated and adaptable in a changing cybersecurity environment

• Strong collaboration skills and comfort working in a distributed team

• Knowledge of cybersecurity standards and frameworks: NIST CSF, NIST 800-53, ISO 27001, PCI DSS

• Preferred: experience with IT audit, internal audit, and/or cyber advisory

Benefits

• Strong benefits package

• Global career opportunities