Cyber Risk Analyst (Contract to Hire)

SupportFinity™; Columbus (OH); Hybrid; USD 55,104 - 61,992; Full time

Benefits offered by this job

401k Benefits

Job summary

A cybersecurity firm is seeking an entry-level Cyber Risk Analyst to join their team in Columbus, OH. This hybrid role requires on-site work twice a week and offers a contract duration of one year. Responsibilities include assisting in cyber risk assessments, implementing the NIST Cybersecurity Framework, and analyzing security data. Candidates should have a Bachelor’s degree and a strong desire to expand their cybersecurity knowledge. Competitive hourly rate ranging from $40 to $45, with additional benefits included.

Qualifications

• Entry-level position supporting cybersecurity team.
• Candidates must be local to Columbus, OH.

Responsibilities

• Assist in conducting cyber risk assessments using NIST CSF.
• Support implementation and maintenance of NIST CSF.
• Collect and analyze security data for potential risks.
• Assist in evaluating security technologies and controls.
• Work with teams to address cyber risk issues.

Skills

Understanding of fundamental cybersecurity concepts

Familiarity with NIST Cybersecurity Framework (CSF)

Basic knowledge of risk management methodologies including FAIR

Strong analytical and problem-solving skills

Ability to collect and analyze security data

Excellent written and verbal communication skills

Proficiency in Microsoft Office Suite

Technical understanding of basic networking concepts

Strong desire to learn cybersecurity

Education

Bachelor’s degree in Computer Science or related field

Relevant certifications (e.g., CompTIA Security+, CRISC)

Job description

Title: Cyber Risk Analyst

Location: Columbus, OH (Hybrid: On-site twice a week)

Contract Type: W2 (Must be authorized to work in the U.S.; No sponsorships, No F1-OPTs, No C2C, No 1099)

Contract Duration: 1 Year (Contract to Hire)

Rate: $40 - $45/hr with 401k Benefits

Job Summary

We are seeking an entry-level Cyber Risk Analyst to join our client's cybersecurity team. This role will support the identification, assessment, and mitigation of cyber risks using established frameworks and methodologies, including NIST Cybersecurity Framework (CSF) and Factor Analysis of Information Risk (FAIR). The analyst will work closely with security teams and stakeholders across the organization to ensure the security and protection of information assets. This is a hybrid role, requiring two days on-site per week in Columbus, OH. Candidates must be local to the area.

Key Responsibilities

1. Risk Assessment Support

• Assist in conducting cyber risk assessments using NIST CSF to identify gaps and areas for improvement.
• Gather data and contribute to FAIR analyses to quantify and prioritize cyber risks.
• Document risk assessment findings and provide recommendations through concise reports.

2. Framework Implementation

• Support the implementation and maintenance of the NIST CSF within the organization.
• Contribute to the development of policies, standards, and procedures based on risk assessment findings and industry best practices.

3. Data Collection and Analysis

• Collect and analyze security data from various sources to identify potential risks and vulnerabilities.
• Assist in developing risk metrics and reporting dashboards.
• Maintain accurate and up-to-date risk registers.

4. Technical Support

• Assist in the evaluation of security technologies and controls.
• Provide technical support for security-related projects and initiatives.
• Stay updated with emerging cyber threats and vulnerabilities.

5. Collaboration and Communication

• Work closely with IT, security, and business teams to address cyber risk issues.
• Communicate risk assessment findings and recommendations to relevant stakeholders.
• Participate in security awareness training and initiatives.

Required Qualifications

1. Knowledge, Skills, and Abilities:

• Understanding of fundamental cybersecurity concepts and principles.
• Familiarity with the NIST Cybersecurity Framework (CSF).
• Basic knowledge of risk management methodologies, preferably including FAIR.
• Strong analytical and problem-solving skills.
• Ability to collect, analyze, and interpret security data.
• Excellent written and verbal communication skills.
• Ability to work independently and collaboratively in a team environment.
• Proficiency in Microsoft Office Suite (Word, Excel, PowerPoint).
• Technical understanding of basic networking concepts and operating systems.
• Strong desire to learn and expand cybersecurity knowledge.

2. Education and Experience:

• Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent experience).
• Relevant certifications (e.g., CompTIA Security+, Certified in Risk and Information Systems Control (CRISC) Foundation, or similar) are a plus.
• Internship or entry-level experience in cybersecurity or risk management is preferred.