Cybersecurity Risk Analyst

StradIT; Tampa (FL); Hybrid; USD 100,000 - 150,000; Full time

Job summary

StradIT seeks a Cybersecurity Risk Analyst to support enterprise cyber risk analytics, governance, and reporting for senior management and Board-level audiences. The role drives metric ownership, data quality, and evidence standards across risk programs.

The position is hybrid with work locations in Dallas, TX or Tampa, FL, and requires 5–10 years of experience in cybersecurity or related risk fields. W2 employment and visa independence are noted in the postings.

Qualifications

• 4–6 years of experience in cybersecurity risk, technology risk, GRC, risk analytics, metrics reporting, or data governance.
• Strong analytical, documentation, and quality review skills with high attention to detail and evidence standards.
• Experience supporting risk metrics, KRIs/KPIs, dashboards, executive reporting, or governance committee materials in a regulated environment preferred.
• Experience with data visualization tools, reporting platforms, or data warehouses such as Power BI, Snowflake, IBM BPM, SmartSuite, CLAW, or similar tools.

Responsibilities

• Support day-to-day execution of cyber security risk metrics lifecycle, including metric intake, maintenance, validation, and retirement activities.
• Maintain the enterprise cyber risk metric inventory by updating metric objectives, scope, calculation methodology, thresholds, authoritative data sources, owners, and evidence references.
• Perform data quality checks, reconciliation, reasonableness reviews, variance analysis, and evidence validation to support accurate and consistent metric reporting.
• Prepare monthly, quarterly, and ad-hoc cyber risk reporting inputs for governance committees, ORM, senior management, and Board-level audiences.
• Support review of executive and Board-level reporting materials to confirm completeness, consistency, data traceability, and alignment to approved risk appetite and tolerance expectations.
• Assist with Out-of-Tolerance metric analysis by gathering supporting data, drafting narrative inputs, validatingroot cause information, and tracking remediation commitments.
• Maintain documentation of metric definitions, calculation logic, data lineage, validation activities, approval decisions, and supporting evidence to ensure audit and regulatory readiness.
• Support metric proposal reviews by collecting required artifacts, assessing data availability, documenting review outcomes, and tracking follow-up actions.
• Coordinate metric-related escalations, action items, and follow-ups from governance forums, ensuring status updates are timelyand accurately reflected in reporting materials.
• Support updates to Risk Tolerance Dashboards, Risk Tolerance Statements, and related enterprise metric repositories through data preparation, quality review, and narrative support.
• Assistwith reporting platform and dashboard maintenance, including IBM BPM workflows, Power BI dashboards, standardized templates, CLAW integration, and future SmartSuite reporting capabilities.
• Partner with metric owners and managers to reinforce consistent data submission, interpretation, evidence standards, and reporting timelines.
• Identifyrecurring data quality issues, reporting gaps, control weaknesses, or thematic trends and escalat...

Skills

Analytical mindset

Documentation

Quality review

Attention to detail

Tools

Power BI

Snowflake

IBM BPM

SmartSuite

CLAW

Job description

Role: Cybersecurity Risk Analyst

Experience: 5 to 10 years

Employment : W2

Job locations: Dallas, TX & Tampa, FL

Work mode: Hybrid

Visa independent only

Purpose:
This role supports the execution, coordination, and operational governance of enterprise cyber security risk analytics and metrics oversight program. The Senior Associate helps ensure metrics are accurate, complete, timely, traceable, and decision-ready for senior management, governance committees, and Board-level reporting, while supporting second-line oversight standards for data quality, evidence, and audit readiness.

Core Responsibilities

• Support day-to-day execution of cyber security risk metrics lifecycle, including metric intake, maintenance, enhancement, validation, and retirement activities.
• Maintain the enterprise cyber risk metric inventory by updating metric objectives, scope, calculation methodology, thresholds, authoritative data sources, owners, and evidence references.
• Perform data quality checks, reconciliation, reasonableness reviews, variance analysis, and evidence validation to support accurateand consistent metric reporting.
• Prepare monthly, quarterly, and ad-hoc cyber risk reporting inputs for governance committees, ORM, senior management, and Board-level audiences.
• Support review of executive and Board-level reporting materials to confirm completeness, consistency, data traceability, and alignment to approved risk appetite and tolerance expectations.
• Assist with Out-of-Tolerance metric analysis by gathering supporting data, drafting narrative inputs, validatingroot cause information, and tracking remediation commitments.
• Maintain documentation of metric definitions, calculation logic, data lineage, validation activities, approval decisions, and supporting evidence to ensure audit and regulatory readiness.
• Support metric proposal reviews by collecting required artifacts, assessing data availability, documenting review outcomes, and tracking follow-up actions.
• Coordinate metric-related escalations, action items, and follow-ups from governance forums, ensuring status updates are timelyand accurately reflected in reporting materials.
• Support updates to Risk Tolerance Dashboards, Risk Tolerance Statements, and related enterprise metric repositories through data preparation, quality review, and narrative support.
• Assistwith reporting platform and dashboard maintenance, including IBM BPM workflows, Power BI dashboards, standardized templates, CLAW integration, and future SmartSuite reporting capabilities.
• Partner with metric owners and managers to reinforce consistent data submission, interpretation, evidence standards, and reporting timelines.
• Identifyrecurring data quality issues, reporting gaps, control weaknesses, or thematic trends and escalat...

Requirements

• 4–6 years of experience in cybersecurity risk, technology risk, GRC, risk analytics, metrics reporting, or data governance.
• Strong analytical, documentation, and quality review skills with high attention to detail and evidence standards.
• Experience supporting risk metrics, KRIs/KPIs, dashboards, executive reporting, or governance committee materials in a regulated environment preferred.
• Experience with data visualization tools, reporting platforms, or data warehouses such as Power BI, Snowflake, IBM BPM, SmartSuite, CLAW, or similar tools.