Cyber Risk Quantification & GRC Senior Analyst

Forrester Research; United States; Remote; USD 119,000 - 193,000; Full time

Job summary

Forrester Research, Inc. is seeking a Senior Analyst to conduct research and deliver strategic advice on risk management for senior leaders. You will analyze cyber risk quantification and governance, produce written reports, and support client inquiries with actionable guidance.

The Senior Analyst will work across Forrester teams to build a comprehensive risk portfolio and collaborate with other analysts on broader risk topics, including compliance and third-party risk.

Qualifications

• Five to seven years as a research analyst, consultant, or practitioner focusing on risk management or cyber risk quantification.
• Strong understanding of risk management roles, trends, and governance artifacts.
• Ability to distill complex ideas into clear, provocative concepts for executives.

Responsibilities

• Develop deep understanding of client risk needs and how to build risk management capabilities.
• Conduct primary research on risk management practices, artifacts, and touchpoints.
• Define the future of risk management and collaborate with Forrester teams on portfolio development.
• Research, write, and create six to eight research projects per year in various formats.
• Consult with clients to apply research insights to their environments and advise accordingly.
• Build industry presence through speaking engagements and media interactions.

Skills

Risk management

Cyber risk quantification

Research analysis

Written communication

Public speaking

Client advisory

Job description

Forrester Research, Inc. is seeking a Senior Analyst to conduct research and deliver strategic advice on risk management for senior leaders. You will analyze cyber risk quantification and governance, produce written reports, and support client inquiries with actionable guidance.

The Senior Analyst will work across Forrester teams to build a comprehensive risk portfolio and collaborate with other analysts on broader risk topics, including compliance and third-party risk.