Cybersecurity Risk Analyst

MDA Edge; Dallas (TX); On-site; USD 80,000 - 100,000; Full time

Job summary

An established industry player is seeking a skilled Information Risk Analyst to enhance their cybersecurity posture. In this role, you will develop and execute risk assessments for applications and infrastructure, ensuring compliance with established risk frameworks. Your expertise will guide business and technology teams in identifying and mitigating risks, while your analytical skills will help articulate complex technical concepts to diverse stakeholders. Join a forward-thinking company where your contributions will significantly impact the security landscape and drive continuous improvement in risk management processes.

Qualifications

• 5+ years of experience in risk assessment within application security.
• Strong understanding of Information Risk Management best practices.
• Technical proficiency in cybersecurity concepts and IT systems.

Responsibilities

• Conduct research on cybersecurity best practices and develop risk assessment questionnaires.
• Plan and perform risk assessments, documenting control deficiencies.
• Collaborate with IT to address cybersecurity risk findings.

Skills

Risk Assessment

Cybersecurity Concepts

Analytical Skills

Communication Skills

Data Manipulation

Presentation Skills

Critical Thinking

Organizational Skills

Education

Bachelor's Degree

CISSP Certification

CISM Certification

CRISC Certification

CCSP Certification

Tools

MS PowerPoint

MS Excel

Job description

Get AI-powered advice on this job and more exclusive features.

This range is provided by MDA Edge. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

$65.00/hr - $65.00/hr

Job Locations: Dallas, TX | Tampa, FL | Jersey City, NJ

Note: Preference will be given to candidates with prior experience in the Financial Services Industry.

Position Summary

The Information Risk Analyst/Cybersecurity Risk Analyst will be responsible for developing risk assessment questionnaires, conducting risk assessments for applications (on-premises and cloud), infrastructure (on-premises and cloud), and vendors, in accordance with a defined risk framework. These assessments will be executed through a formalized risk assessment program. The role involves identifying risks related to how business and technology teams utilize IT systems and supporting technological infrastructure.

Key Responsibilities

• Conduct research on technology security, cybersecurity best practices, and develop risk assessment questionnaires.
• Plan and perform risk assessments following the organization's methodology, documenting and communicating control deficiencies in business processes and technology systems.
• Collaborate with Enterprise IT to address cybersecurity risk findings, new initiatives, and ad hoc processes, covering areas such as databases, operating systems, networking devices, storage systems, and cloud solutions.
• Provide risk remediation recommendations to business and technology teams to mitigate identified control gaps.
• Clearly articulate risks in a way that is understandable to both business and technology stakeholders.
• Evaluate management responses to ensure remediation plans effectively address identified risks.
• Prepare assessment reports and dashboards for IT owners.
• Maintain risk documentation within the designated risk register.
• Guide business and technology teams through policy exception and risk acceptance processes.
• Contribute to the continuous improvement of the risk assessment process.

Required Experience

• 5+ years of experience in risk assessment within application security, infrastructure security, or vendor risk management.
• Experience in the Financial Services Industry is preferred but not mandatory.
• Strong understanding of Information Risk Management best practices.
• Technical proficiency in cybersecurity concepts and IT systems.

Required Knowledge & Skills

• Strong technical knowledge of infrastructure, networks, databases, and systems and their impact on cybersecurity risk.
• In-depth understanding of security methodologies, policies, and industry best practices.
• Ability to articulate technical concepts effectively to both technical and non-technical audiences.
• Strong analytical and critical thinking skills.
• Excellent presentation skills (MS PowerPoint).
• Proficiency in data manipulation using MS Excel.
• Ability to build consensus, influence decision-making, and foster collaboration across teams.
• Strong written and verbal communication skills.
• Exceptional organizational skills with the ability to adapt to a dynamic work environment.
• Sound business judgment and ability to engage with all levels of management.

Education & Certifications

• Bachelor's degree preferred.
• Relevant industry certifications such as CISSP, CISM, CRISC, or CCSP are preferred.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Other

Industries

• IT Services and IT Consulting

Referrals increase your chances of interviewing at MDA Edge by 2x

Get notified about new Cyber Security Analyst jobs in Dallas, TX.