Cyber Risk Analyst Contract to Hire

Blue Star Partners LLC; Columbus (OH); Hybrid; USD 60,000 - 80,000; Full time

Job summary

An innovative firm is seeking a motivated Cyber Risk Analyst to join their cybersecurity team. This entry-level position offers the chance to support the identification and mitigation of cyber risks using established frameworks like NIST and FAIR. The role involves collaborating with various stakeholders and contributing to the development of security policies and procedures. If you're eager to kickstart your career in cybersecurity and work in a dynamic, hybrid environment, this opportunity is perfect for you. Join a team that values growth and learning while making a significant impact on information security.

Benefits

401k Benefits

Qualifications

• Entry-level role requiring understanding of cybersecurity concepts and risk management.
• Candidates should have strong analytical skills and be proficient in data analysis.

Responsibilities

• Assist in cyber risk assessments and document findings.
• Support implementation of NIST CSF and develop policies based on assessments.
• Collaborate with IT and security teams to address cyber risk issues.

Skills

Analytical Skills

Problem-Solving Skills

Communication Skills

Understanding of Cybersecurity Concepts

Data Collection and Analysis

Team Collaboration

Desire to Learn

Education

Bachelor’s degree in Computer Science

Relevant Certifications (e.g., CompTIA Security+)

Tools

Microsoft Office Suite

Job description

Title: Cyber Risk Analyst

Location: Columbus, OH (Hybrid: On-site twice a week)

Contract Type: W2 (Must be authorized to work in the U.S.; No sponsorships, No F1-OPTs, No C2C, No 1099)

Contract Duration: 1 Year (Contract to Hire)

Rate: $40 - $45/hr with 401k Benefits

Job Summary:

We are seeking an entry-level Cyber Risk Analyst to join our client's cybersecurity team. This role will support the identification, assessment, and mitigation of cyber risks using established frameworks and methodologies, including NIST Cybersecurity Framework (CSF) and Factor Analysis of Information Risk (FAIR). The analyst will work closely with security teams and stakeholders across the organization to ensure the security and protection of information assets. This is a hybrid role, requiring two days on-site per week in Columbus, OH. Candidates must be local to the area.

Key Responsibilities:

1. Risk Assessment Support

• Assist in conducting cyber risk assessments using NIST CSF to identify gaps and areas for improvement.
• Gather data and contribute to FAIR analyses to quantify and prioritize cyber risks.
• Document risk assessment findings and provide recommendations through concise reports.

2. Framework Implementation

• Support the implementation and maintenance of the NIST CSF within the organization.
• Contribute to the development of policies, standards, and procedures based on risk assessment findings and industry best practices.

3. Data Collection and Analysis

• Collect and analyze security data from various sources to identify potential risks and vulnerabilities.
• Assist in developing risk metrics and reporting dashboards.
• Maintain accurate and up-to-date risk registers.

4. Technical Support

• Assist in the evaluation of security technologies and controls.
• Provide technical support for security-related projects and initiatives.
• Stay updated with emerging cyber threats and vulnerabilities.

5. Collaboration and Communication

• Work closely with IT, security, and business teams to address cyber risk issues.
• Communicate risk assessment findings and recommendations to relevant stakeholders.
• Participate in security awareness training and initiatives.

Required Qualifications:

1. Knowledge, Skills, and Abilities:

• Understanding of fundamental cybersecurity concepts and principles.
• Familiarity with the NIST Cybersecurity Framework (CSF).
• Basic knowledge of risk management methodologies , preferably including FAIR.
• Strong analytical and problem-solving skills.
• Ability to collect, analyze, and interpret security data.
• Excellent written and verbal communication skills.
• Ability to work independently and collaboratively in a team environment.
• Proficiency in Microsoft Office Suite (Word, Excel, PowerPoint).
• Technical understanding of basic networking concepts and operating systems.
• Strong desire to learn and expand cybersecurity knowledge.

2. Education and Experience:

• Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent experience).
• Relevant certifications (e.g., CompTIA Security+ , Certified in Risk and Information Systems Control (CRISC) Foundation , or similar) are a plus.
• Internship or entry-level experience in cybersecurity or risk management is preferred.