Cybersecurity Risk Analyst

Global Sports Jobs Limited; Nashville (TN); Hybrid; USD 95,000 - 140,000; Full time

Benefits offered by this job

Medical insurance

Telemedicine

Paid vacation and holidays

Sick time

Parental leave

Educational assistance

Mental health resources

401K plan

Commuter benefits

Discretionary bonus

Job summary

Creative Artists Agency (CAA) seeks an experienced Information Security professional to deliver security services across IT and cloud environments. The role emphasizes risk management, vendor assessments, and early security integration in projects.

You will coordinate with business units, ensure secure deployments, and develop metrics to prove control effectiveness. Hybrid work in Nashville is offered, with a strong emphasis on cross‑functional collaboration.

Qualifications

• This role requires 3–4 years in IT and at least 2 years in cybersecurity risk management.
• Familiarity with security frameworks (NIST, ISO 27001), data privacy regulations (GDPR, CCPA), and attestations (SOC, ISO, PCI DSS, FedRAMP).
• Experience coordinating security tooling integrations and reviewing vendor security postures.

Responsibilities

• Support vendor management programme with risk reviews and renewals.
• Conduct security assessments for vendors, products, and applications.
• Partner with business teams to improve security workflows and integrations.
• Coordinate security integrations (SSO, logs, secrets, alerting) across environments.
• Develop security metrics to measure effectiveness of controls.

Skills

Analytical skills

Vendor risk assessment

Security analytics tools

Due diligence

Cloud security

Security integrations

NIST/ISO familiarity

IR coordination

Communication

Education

Bachelor's or Master's in a relevant field

Tools

Azure

AWS

Splunk

OneTrust

SIG (GRC)

Job description

About the Role

This is a hands-on security position working within the Information Security group and with the internal IT department at large. Its core focus is to ensure consistent, measurable end-to-end delivery of security services, developing and deploying capabilities that protect enterprise systems and data with the security controls and tools required to meet policy and compliance requirements. The role is a key part of efforts to build and support a defensible environment in which threats and compromises can be detected, contained and responded to quickly in ways that enable the business needs of a highly collaborative organisation. The environment is fast-paced and commonly on the leading edge of technology, including early adoption of various cloud services and the challenges of integrating those services into security practice.

Key Responsibilities

• Support a Technology Vendor Management programme, ensuring technology risk reviews across multiple disciplines and monitoring for renewals and savings opportunities.
• Participate in risk reviews of the IT control framework (NIST CSF, CIS, ITIL, ISO 27001 and similar).
• Conduct thorough vendor, product and application security assessments, partnering with systems owners to integrate security early during the project lifecycle.
• Partner with business groups to review workflows and produce output that enhances security processes in support of those workflows.
• Coordinate, across service owners, the implementation of core security integrations (SSO, event logs, secrets, alerting, threat model and backup/recovery) with applications developed in-house and in externally hosted or SaaS environments.
• Ensure the security considerations identified are implemented and that solutions are configured securely.
• Coordinate with IRM leadership to develop and deliver key security metrics that confirm technical security controls are meeting desired objectives and to ensure the measurable effectiveness of technical controls.

Required Experience & Qualifications

• A minimum of 3-4 years in Information Technology.
• A minimum of 2 years' experience in cybersecurity risk management.
• A Bachelor's or Master's degree in a relevant field of work.
• Strong analytical skills in conducting due diligence to identify, assess and prioritise vendor risks.
• Familiarity with information security frameworks (NIST, ISO 27001), data privacy regulations (GDPR, CCPA) and information security certifications/attestations (SOC, ISO, PCI DSS, FedRAMP).
• Experience in coordinating technical integrations for security tooling and processes.
• Ability to review complex systems architectures to identify key security integration opportunities.
• Ability to produce a comprehensive, written security assessment of a vendor's security posture.
• Experience using security analytics tooling to produce operational metrics and dashboards.
• A strong understanding of the fundamental operations of servers, operating systems, cloud applications and infrastructure.

Preferred Skills

• Core skills in cybersecurity fundamentals and third-party risk management.
• Familiarity with third-party risk management tools and processes such as OneTrust, SIG or similar GRC platforms.
• Hands-on experience in Azure and AWS cloud environments, and familiarity with core cloud services and cloud architecture.
• Familiarity with core security concepts of single sign-on (e.g. PingFed, SAML), identity and access administration (Active Directory, Azure AD, AWS IAM) and event management (Splunk).
• Expert skills in using the Microsoft Office suite and JIRA.

Workplace

• Hybrid working, based in the Nashville office.

Salary

• Wages may vary based upon factors including, but not limited to, relevant experience, time in role, business sector and geographic location.

Benefits & Perks

• Competitive compensation and benefits package for all regular full-time employees.
• Company pays 80%-100% of the cost of medical, basic life and AD&D insurance, and telemedicine.
• Employee assistance and mental health counselling in person, virtually or through text.
• Paid vacation and holidays, paid sick time, paid parental leave and other paid leaves of absence, NICU leave, and bereavement resources.
• Adoption benefits and educational assistance.
• Mental health resources and an employee assistance plan.
• Voluntary benefits available by election: dental and vision insurance, 401K plan, flexible spending accounts (health care and dependent care), health savings account, and voluntary life and AD&D insurance.
• Commuter benefits.
• Other statutory mandated benefits.
• Eligibility for a discretionary bonus.

About the Company

Creative Artists Agency (CAA) is the leading entertainment and sports agency, with global expertise in filmed and live entertainment, digital media, publishing, sponsorship sales and endorsements, media finance, consumer investing, fashion, trademark licensing and philanthropy.