Cyber Risk Analyst

Fulcrum Technology Solutions; Houston (TX); Remote; USD 85,000 - 110,000; Full time

Job summary

Fulcrum Technology Solutions is seeking a Cyber Risk Analyst to support enterprise information security initiatives by evaluating security risks from third-party vendors, applications, and technology solutions. The role involves assessing proposed technologies, identifying vulnerabilities, and providing risk mitigation recommendations that align with business objectives.

The ideal candidate has strong IT infrastructure knowledge and can translate complex findings into clear risk assessments for

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Information Systems, or related field.
• 4+ years of experience in information security or cybersecurity-related role.
• 4+ years of experience in an IT-related environment.

Responsibilities

• Perform third-party vendor security assessments and evaluate risks of new and existing technology solutions.
• Analyze solution architectures, data flows, user access requirements, and business workflows to identify security concerns.
• Conduct security risk assessments across cloud, on-premises, and hybrid environments.
• Evaluate mobile applications and devices, policy exceptions, and other security-related requests.
• Identify potential threats and vulnerabilities, assessing likelihood, business impact, and organizational risk.
• Develop comprehensive risk assessment reports with technical findings and recommended mitigations.
• Present assessment results and risk recommendations to leadership and stakeholders.
• Recommend security controls and risk treatment strategies to reduce exposure.
• Track identified risks through remediation or formal risk acceptance.
• Provide guidance to internal teams on information security policies, standards, and procedures.
• Collaborate with cybersecurity team members through knowledge sharing and reviews.
• Stay current on emerging technologies, threats, industry trends, and best practices.

Skills

Analytical skills

IT infrastructure knowledge

IAM

Data security

Network security

Endpoint security

AI security considerations

Technical writing

Communication

multitasking

Education

Bachelor's degree in Information Technology or related field

Job description

Fulcrum Technology Solutions are seeking a Cyber Risk Analyst for a client to support enterprise information security initiatives by evaluating the security risks associated with third-party vendors, applications, and technology solutions. This individual will assess proposed technologies and environments, identify potential security vulnerabilities, and provide recommendations to mitigate risk while supporting business objectives.

The ideal candidate has a solid technical understanding of IT infrastructure and cybersecurity principles, along with the ability to translate complex technical findings into clear, actionable risk assessments for both technical and business stakeholders.

NOTE: This client would like this person in Houston, but is a remote Houston role.

Key Responsibilities

• Perform third-party vendor security assessments and evaluate the risks associated with new and existing technology solutions.
• Analyze solution architectures, data flows, user access requirements, and business workflows to identify potential security concerns.
• Conduct security risk assessments across cloud, on-premises, and hybrid environments.
• Evaluate mobile applications and devices, policy exceptions, and other security-related requests.
• Identify potential threats and vulnerabilities, assessing their likelihood, business impact, and overall organizational risk.
• Develop comprehensive risk assessment reports outlining technical findings, identified risks, and recommended mitigation strategies.
• Present assessment results and risk recommendations to leadership and relevant business stakeholders.
• Recommend appropriate security controls and risk treatment strategies to reduce organizational exposure.
• Track identified risks through remediation or formal risk acceptance.
• Provide guidance to internal teams regarding information security policies, standards, and procedures.
• Collaborate with cybersecurity team members through knowledge sharing, peer reviews, and continuous improvement initiatives.
• Stay current on emerging technologies, cybersecurity threats, industry trends, and evolving security best practices.

Required Qualifications & Skills

• Strong analytical skills with the ability to evaluate the security implications of new and existing technologies.
• Technical understanding of IT environments and solution architectures, including on-premises, cloud, and hybrid infrastructures.
• Working knowledge of core cybersecurity domains, including:
• Identity and Access Management (IAM)
• Data Security and Protection
• Network Security
• Endpoint Security and Protection
• Artificial Intelligence (AI) security considerations
• Understanding of information security risk management frameworks, assessment methodologies, and risk evaluation practices.
• Ability to identify security gaps and recommend appropriate controls and mitigation strategies.
• Strong technical writing skills with the ability to develop clear, detailed, and professional assessment reports.
• Excellent communication and interpersonal skills, including the ability to present technical findings to both technical and non-technical audiences.
• Ability to manage multiple assessments and competing priorities in a fast-paced environment.
• Familiarity with industry security standards, regulatory requirements, and cybersecurity frameworks.

Education & Experience

• Bachelor's degree in Information Technology, Cybersecurity, Information Systems, or a related field, or equivalent professional experience.
• 4+ years of experience in an information security or cybersecurity-related role.
• 4+ years of experience working in an IT-related environment.

Preferred Qualifications

• Industry-recognized cybersecurity certifications such as: