Cyber Risk Analyst: Vendor & Internal Risk

Gulf Coast Automation Group; Northbrook (IL); Hybrid; USD 55,000 - 77,000; Full time

Benefits offered by this job

Laptop provided

Monitors provided

Headset provided

Job summary

TalentFish is seeking a Cybersecurity Risk Analyst in Northbrook, IL for a hybrid contract-to-hire role. You will split duties evenly between vendor/third‑party risk and internal risk assessments, coordinating contractor risk work from intake to remediation.

You will communicate risk clearly to business owners, document findings, and support remediation activities and risk reporting across programs. Laptop/monitor headset provided as needed.

Qualifications

• Bachelor's or Master's degree required in a related field.
• 4+ years of cybersecurity or risk management experience.
• At least 2 years managing risk/compliance matters or third-party relationships.
• Proven ability to conduct risk assessments independently.
• Hands-on understanding of vendor/third-party and internal risk assessment processes.
• Experience applying FAIR and NIST methodologies; familiar with ISO/IEC 27001.
• Ability to translate security concerns into business risk statements.
• Experience maintaining risk registers and remediation tracking.
• Strong analytical judgment and ability to manage high workload.

Responsibilities

• Independently conduct and manage cybersecurity risk assessments for tech, services, and third parties.
• Divide responsibilities between vendor/third-party and internal risk assessments.
• Coordinate vendor assessments and manage intake through remediation.
• Document risks, controls, and remediation actions in the risk register.
• Provide reporting highlighting material risks and residual risk.
• Support responses to customer security questionnaires and compliance requirements.

Skills

Cybersecurity risk assessments

Vendor/third-party risk

Internal risk assessments

Risk management

NIST methodologies

FAIR

ISO/IEC 27001 familiarity

ServiceNow experience

Communication of risk to stakeholders

Risk registers & remediation tracking

Education

Bachelor's or Master's degree in Business/CS/Cybersecurity/Information Security or related field

Tools

ServiceNow

Job description

TalentFish is seeking a Cybersecurity Risk Analyst in Northbrook, IL for a hybrid contract-to-hire role. You will split duties evenly between vendor/third‑party risk and internal risk assessments, coordinating contractor risk work from intake to remediation.

You will communicate risk clearly to business owners, document findings, and support remediation activities and risk reporting across programs. Laptop/monitor headset provided as needed.