Cybersecurity Risk Analyst

Jobtailor; Town of Florida (NY); On-site; USD 100,000 - 140,000; Full time

Job summary

Jobtailor in New York seeks an experienced cybersecurity risk metrics professional to support the metrics lifecycle, data quality, and governance reporting. You will maintain the metric inventory, ensure data lineage, and validate evidence for board-level audiences.

The role emphasizes advanced analytics, KPI development, and cross-functional collaboration with risk owners to improve timeliness and traceability across enterprise risk reporting platforms.

Qualifications

• 5 to 10 years of experience stated in the posting.
• 4–6 years of experience in cybersecurity risk, technology risk, GRC, risk analytics, metrics reporting, or data governance.
• Strong analytical, documentation, and quality review skills with high attention to detail and evidence standards.
• Experience supporting risk metrics, KRIs/KPIs, dashboards, executive reporting, or governance committee materials in a regulated environment.

Responsibilities

• Support day-to-day execution of the cyber security risk metrics lifecycle, including metric intake, maintenance, enhancement, validation, and retirement.
• Maintain the enterprise cyber risk metric inventory, including objectives, scope, calculation methodology, thresholds, authoritative data sources, owners, and evidence references.
• Perform data quality checks, reconciliation, reasonableness reviews, variance analysis, and evidence validation.
• Prepare monthly, quarterly, and ad-hoc cyber risk reporting inputs for governance committees, ORM, senior management, and Board-level audiences.

Skills

Cybersecurity Risk Management

Data Quality Assurance

Power BI Dashboard Development

Risk Metrics Reporting

GRC

Tools

Power BI

IBM BPM

Snowflake

SmartSuite

CLAW

Job description

• Support day-to-day execution of the cyber security risk metrics lifecycle, including metric intake, maintenance, enhancement, validation, and retirement
• Maintain the enterprise cyber risk metric inventory, including objectives, scope, calculation methodology, thresholds, authoritative data sources, owners, and evidence references
• Perform data quality checks, reconciliation, reasonableness reviews, variance analysis, and evidence validation
• Prepare monthly, quarterly, and ad-hoc cyber risk reporting inputs for governance committees, ORM, senior management, and Board-level audiences
• Review executive and Board-level reporting materials for completeness, consistency, data traceability, and alignment with approved risk appetite and tolerance expectations
• Assist with Out-of-Tolerance metric analysis, root-cause validation, narrative drafting, and remediation tracking
• Maintain documentation covering metric definitions, calculation logic, data lineage, validation activities, approval decisions, and supporting evidence
• Support metric proposal reviews and track follow-up actions
• Coordinate metric-related escalations, action items, and governance-forum follow-ups
• Support updates to Risk Tolerance Dashboards, Risk Tolerance Statements, and enterprise metric repositories
• Assist with reporting platform and dashboard maintenance, including IBM BPM workflows, Power BI dashboards, standardized templates, CLAW integration, and future SmartSuite capabilities
• Partner with metric owners and managers on data submission, interpretation, evidence standards, and reporting timelines
• Identify recurring data quality issues, reporting gaps, control weaknesses, and thematic trends; escalation insights to program leadership
• Support automation, process improvement, and modernization efforts to improve reporting timeliness, reduce manual rework, and strengthen traceability

Requirements

• 5 to 10 years of experience stated in the posting
• Visa independent only
• 4–6 years of experience in cybersecurity risk, technology risk, GRC, risk analytics, metrics reporting, or data governance
• Strong analytical, documentation, and quality review skills with high attention to detail and evidence standards
• Experience supporting risk metrics, KRIs/KPIs, dashboards, executive reporting, or governance committee materials in a regulated environment preferred
• Experience with data visualization tools, reporting platforms, or data warehouses such as Power BI, Snowflake, IBM BPM, SmartSuite, CLAW, or similar tools

Core Competencies

Demonstrates expertise in cyber security risk metrics management, including data quality assurance, reporting, and governance. Proficient in utilizing data visualization tools and maintaining comprehensive documentation to support risk analysis and decision-making.

Highest-signal resume keywords

• Cybersecurity Risk Management
• Data Quality Assurance
• Power BI Dashboard Development
• Risk Metrics Reporting
• Governance, Risk, and Compliance (GRC)

Hard Skills

• Risk Analytics
• Metrics Reporting
• Data Governance
• Variance Analysis
• Evidence Validation
• Root-Cause Analysis
• Documentation Management
• Quality Review
• Data Reconciliation
• Analytical Skills

Soft Skills

• Attention to Detail
• Communication Skills
• Collaboration
• Problem-Solving

Industry Keywords

• Key Risk Indicators (KRIs)
• Key Performance Indicators (KPIs)
• Regulated Environment
• Risk Tolerance
• Governance Committees

Tools & Technologies

• Power BI
• IBM BPM
• Snowflake
• SmartSuite
• CLAW