Cybersecurity Risk Analyst

Stradit LLC; Dallas, Northern (TX, KY); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Stradit LLC is seeking a Cybersecurity Risk Analyst to support enterprise cyber risk analytics, governance reporting, and Board-level insights. The role covers metric lifecycle management, data quality, and evidence validation in a hybrid environment across Dallas, TX and Tampa, FL.

Ideal candidates have 5–10 years in cybersecurity risk or data governance, with strong analytical, documentation and reporting skills and experience with Power BI and related tools.

Qualifications

• Strong analytical, documentation, and quality review skills.
• Experience supporting risk metrics, KRIs/KPIs, dashboards or governance materials.

Responsibilities

• Support day-to-day execution of cyber security risk metrics lifecycle, including intake, maintenance and retirement activities.
• Maintain enterprise cyber risk metric inventory with objectives, scope, calculation methodology, thresholds, data sources, owners and evidence references.
• Perform data quality checks, reconciliation, reasonableness reviews, variance analysis, and evidence validation for accurate reporting.
• Prepare monthly, quarterly, and ad-hoc cyber risk reporting inputs for governance committees, ORM, senior management and Board reporting.
• Support review of executive and Board materials to ensure completeness and data traceability.

Skills

Analytical skills

Documentation

Quality review

Tools

Power BI

Snowflake

IBM BPM

SmartSuite

CLAW

Job description

Role: Cybersecurity Risk Analyst

Experience: 5 to 10 years

Employment : W2

Job locations: Dallas, TX & Tampa, FL

Work mode: Hybrid

Visa independent only

Purpose:

This role supports the execution, coordination, and operational governance of enterprise cyber security risk analytics and metrics oversight program. The Senior Associate helps ensure metrics are accurate, complete, timely, traceable, and decision-ready for senior management, governance committees, and Board-level reporting, while supporting second-line oversight standards for data quality, evidence, and audit readiness.

Core Responsibilities

• Support day-to-day execution of cyber security risk metrics lifecycle, including metric intake, maintenance, enhancement, validation, and retirement activities.
• Maintain the enterprise cyber risk metric inventory by updating metric objectives, scope, calculation methodology, thresholds, authoritative data sources, owners, and evidence references.
• Perform data quality checks, reconciliation, reasonableness reviews, variance analysis, and evidence validation to support accurateand consistent metric reporting.
• Prepare monthly, quarterly, and ad-hoc cyber risk reporting inputs for governance committees, ORM, senior management, and Board-level audiences.
• Support review of executive and Board-level reporting materials to confirm completeness, consistency, data traceability, and alignment to approved risk appetite and tolerance expectations.
• Assist with Out-of-Tolerance metric analysis by gathering supporting data, drafting narrative inputs, validatingroot cause information, and tracking remediation commitments.
• Maintain documentation of metric definitions, calculation logic, data lineage, validation activities, approval decisions, and supporting evidence to ensure audit and regulatory readiness.
• Support metric proposal reviews by collecting required artifacts, assessing data availability, documenting review outcomes, and tracking follow-up actions.
• Coordinate metric-related escalations, action items, and follow-ups from governance forums, ensuring status updates are timelyand accurately reflected in reporting materials.
• Support updates to Risk Tolerance Dashboards, Risk Tolerance Statements, and related enterprise metric repositories through data preparation, quality review, and narrative support.
• Assistwith reporting platform and dashboard maintenance, including IBM BPM workflows, Power BI dashboards, standardized templates, CLAW integration, and future SmartSuite reporting capabilities.
• Partner with metric owners and managers to reinforce consistent data submission, interpretation, evidence standards, and reporting timelines.
• Identifyrecurring data quality issues, reporting gaps, control weaknesses, or thematic trends and elevate insights to program leadership for review and credible challenge.
• Support automation, process improvement, and modernization efforts that improve reporting timeliness, reduce manual rework, and strengthen traceability across the metrics lifecycle.

Requirements

• 4–6 years of experience in cybersecurity risk, technology risk, GRC, risk analytics, metrics reporting, or data governance.
• Strong analytical, documentation, and quality review skills with high attention to detail and evidence standards.
• Experience supporting risk metrics, KRIs/KPIs, dashboards, executive reporting, or governance committee materials in a regulated environment preferred.
• Experience with data visualization tools, reporting platforms, or data warehouses such as Power BI, Snowflake, IBM BPM, SmartSuite, CLAW, or similar tools.