Cyber Risk & Controls Analyst

Appathon; Plano (TX); On-site; USD 55,000 - 61,000; Full time

Job summary

Upslea is seeking a Technology & Cybersecurity Risk Management Analyst to support enterprise technology and cybersecurity risk initiatives. You will assess risks, evaluate controls, support remediation, and develop governance materials for leadership.

You will collaborate with cybersecurity, technology, business, and control owners across the organization to ensure risk-informed decision making and continuous improvement of governance processes.

Qualifications

• Bachelor's degree in a tech or business field or equivalent experience.
• 1–3 years of cybersecurity or IT risk experience.
• Understanding of cybersecurity principles, controls, and risk mitigation.
• Familiar with NIST, COBIT, and ISO 27001.

Responsibilities

• Conduct risk assessments and stakeholder discussions.
• Identify, document, and monitor technology and cybersecurity risks.
• Evaluate security controls and map risks to policies and frameworks.
• Support control walkthroughs and risk assessments with owners.
• Document risks, findings, evidence, and assessment results.
• Track remediation activities and overdue risk issues.
• Maintain risk information in GRC systems.
• Prepare risk reports and dashboards for leadership.
• Communicate cybersecurity risks to technical and non-technical audiences.
• Support continuous improvement of risk governance processes.

Skills

COBIT

Cybersecurity

Governance

Information Security

ISO27001

IT risk

Risk analysis

Technology risk

Stakeholder management

Education

Bachelor

Tools

ServiceNow

MS Excel

PowerPoint

GRC tools

Job description

Upslea is seeking a Technology & Cybersecurity Risk Management Analyst to support enterprise technology and cybersecurity risk initiatives. You will assess risks, evaluate controls, support remediation, and develop governance materials for leadership.

You will collaborate with cybersecurity, technology, business, and control owners across the organization to ensure risk-informed decision making and continuous improvement of governance processes.