Cyber Risk & Governance Analyst

Appathon; Plano (TX); On-site; USD 55,000 - 62,000; Full time

Job summary

Upslea is seeking a Technology & Cybersecurity Risk Management Analyst to support enterprise technology and cybersecurity risk initiatives. You will assess risks, evaluate controls, and develop governance materials while collaborating with cybersecurity, technology, and business teams.

The ideal candidate has 1–3 years in cybersecurity or IT risk, a Bachelor's degree, and knowledge of NIST, COBIT, ISO 27001. Proficiency with ServiceNow and GRC tools is a plus; strong communication is required.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS, Business, or related field or equivalent experience.
• 1–3 years of cybersecurity or IT risk, compliance, or governance experience.
• Knowledge of cybersecurity principles, controls, risk assessment, and risk mitigation.
• Familiarity with NIST, COBIT, and ISO 27001.

Responsibilities

• Conduct technology and cybersecurity risk assessments and stakeholder discussions.
• Identify, document, and monitor technology and cybersecurity risks.
• Evaluate security controls and map risks to controls, policies, and frameworks.
• Support control walkthroughs and risk assessments with control owners.
• Document risks, findings, evidence, and assessment results.
• Track remediation activities and elevate overdue or significant risk issues.
• Maintain risk information within GRC and risk management tools.
• Prepare risk reports, dashboards and presentations for leadership.
• Communicate cybersecurity risks to technical and non-technical stakeholders.
• Support continuous improvement of risk management and governance processes.

Skills

Cybersecurity

IT risk

Risk assessment

Documentation

Communication

Stakeholder management

Education

Bachelor's degree

Tools

ServiceNow

Excel

PowerPoint

Word

GRC tools

NIST/COBIT/ISO 27001

Job description

Upslea is seeking a Technology & Cybersecurity Risk Management Analyst to support enterprise technology and cybersecurity risk initiatives. You will assess risks, evaluate controls, and develop governance materials while collaborating with cybersecurity, technology, and business teams.

The ideal candidate has 1–3 years in cybersecurity or IT risk, a Bachelor's degree, and knowledge of NIST, COBIT, ISO 27001. Proficiency with ServiceNow and GRC tools is a plus; strong communication is required.