CyberSecurity Risk Analyst

SherlockTalent; Delray Beach (FL); On-site; USD 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a Security Risk Analyst to enhance their cyber risk management program. This role involves executing cyber risk assessments, identifying risks, and collaborating with stakeholders to develop effective risk treatment plans. The ideal candidate will possess a strong background in compliance and information security, with expertise in frameworks such as NIST and ISO. Join a forward-thinking team dedicated to maintaining the highest standards of cybersecurity and protecting vital information assets. If you have a passion for security and a knack for analysis, this opportunity is perfect for you.

Qualifications

• 2+ years of experience in compliance and information security focusing on risk.
• Understanding of cybersecurity risk management frameworks and best practices.

Responsibilities

• Administer cyber risk management program according to NIST standards.
• Perform enterprise cyber risk assessments and document findings.
• Collaborate with stakeholders to develop risk treatment plans.

Skills

Compliance

Information Security

Risk Management

Project Management

Communication Skills

Education

Bachelor's degree in Business

Master's degree in Information Technology

Bachelor's degree in Computer Science

Tools

NIST Cyber Security Framework

SOC 2

ISO 27001

Job description

Security Risk Analyst

A successful candidate will have a strong background in the following areas:

1. Development and execution of cyber risk assessments for Honorlock applications, products, and services
2. Risk identification through the performance of risk assessments and other measures
3. Preparation of risk assessment findings and reports on remediation plan progress
4. Due diligence as part of M&A initiatives.

Responsibilities include:

1. Administration of the cyber risk management program following the NIST or other equivalent cyber risk management framework and other security standards and related industry best practices
2. Performance of enterprise cyber risk assessments to identify inherent and residual risks
3. Analyze and document findings, recommend and report program gaps to leadership
4. Administration of the security risk register and related remediation activities
5. Administration of the risk management information system
6. Collaboration with technology and business stakeholders to develop and document risk treatment plans in line with the enterprise risk appetite
7. Report key metrics including the status of assessments, issue management, and risk management
8. Develop and maintain documentation on processes, procedures in accordance with standards, regulations, and industry best practices
9. Maintain an understanding of emerging trends in information security threats and risks
10. Prepare and present risk assessment findings, guide remediation plans and report on progress

Minimum Qualifications:

1. Bachelor's or Master's degree in Business, Information Technology, Computer Science or equivalent experience
2. Must possess 2+ years' experience in compliance, information security, and/or information technology with a focus on security/risk.
3. Understanding of cybersecurity risk management maturity practices and frameworks
4. Proficiency in the application of NIST Cyber Security Framework (CFS), SOC 2, ISO 27001, and other best-practice standards.
5. Understanding of a broad range of security technical concepts
6. Excellent project management and organizational skills
7. Excellent communication, interpersonal skills, and sound business judgment

Preferred Qualifications:

1. Experience performing assessments of IT-related processes such as system and information security, system development, and change management, computer operations, and data protection
2. Experience working with internal and external cybersecurity audits, vulnerability and risk assessments
3. Experience in managing issues through risk analysis/treatment/mitigation processes