Cybersecurity Risk Analyst

Stradit LLC; Dallas (TX); On-site; USD 95,000 - 130,000; Full time

Job summary

StradIT is seeking a Cybersecurity Risk Analyst to support risk metrics lifecycle, governance reporting, and data quality across enterprise systems. The role focuses on coordinating metric definitions, data lineage, and evidence to ensure audit-ready materials for senior leadership.

Ideal candidates bring 4–6 years of cybersecurity risk experience and strong analytical, documentation, and data visualization skills with familiarity in Power BI and related tools.

Qualifications

• 4–6 years of experience in cybersecurity risk, technology risk, GRC, risk analytics, metrics reporting, or data governance.
• Strong analytical, documentation, and quality review skills with high attention to detail.

Responsibilities

• Support day-to-day execution of cyber security risk metrics lifecycle, including metric intake, maintenance, enhancement, validation, and retirement activities.
• Maintain the enterprise cyber risk metric inventory by updating metric objectives, scope, calculation methodology, thresholds, authoritative data sources, owners, and evidence references.
• Perform data quality checks, reconciliation, reasonableness reviews, variance analysis, and evidence validation for accurate reporting.
• Prepare monthly, quarterly, and ad-hoc cyber risk reporting inputs for governance committees and senior management.
• Support review of executive and Board-level reporting materials for completeness, consistency, and data traceability.

Skills

Analytical skills

Documentation

Quality review

Evidence standards

Tools

Power BI

Snowflake

IBM BPM

SmartSuite

CLAW

Job description

Role: Cybersecurity Risk Analyst

Experience: 5 to 10 years

Employment : W2

Job locations: Dallas, TX & Tampa, FL

Work mode: Hybrid

Visa independent only

Purpose:

This role supports the execution, coordination, and operational governance of enterprise cyber security risk analytics and metrics oversight program. The Senior Associate helps ensure metrics are accurate, complete, timely, traceable, and decision-ready for senior management, governance committees, and Board-level reporting, while supporting second-line oversight standards for data quality, evidence, and audit readiness.

Core Responsibilities

• Support day-to-day execution of cyber security risk metrics lifecycle, including metric intake, maintenance, enhancement, validation, and retirement activities.
• Maintain the enterprise cyber risk metric inventory by updating metric objectives, scope, calculation methodology, thresholds, authoritative data sources, owners, and evidence references.
• Perform data quality checks, reconciliation, reasonableness reviews, variance analysis, and evidence validation to support accurateand consistent metric reporting.
• Prepare monthly, quarterly, and ad-hoc cyber risk reporting inputs for governance committees, ORM, senior management, and Board-level audiences.
• Support review of executive and Board-level reporting materials to confirm completeness, consistency, data traceability, and alignment to approved risk appetite and tolerance expectations.
• Assist with Out-of-Tolerance metric analysis by gathering supporting data, drafting narrative inputs, validatingroot cause information, and tracking remediation commitments.
• Maintain documentation of metric definitions, calculation logic, data lineage, validation activities, approval decisions, and supporting evidence to ensure audit and regulatory readiness.
• Support metric proposal reviews by collecting required artifacts, assessing data availability, documenting review outcomes, and tracking follow-up actions.
• Coordinate metric-related escalations, action items, and follow-ups from governance forums, ensuring status updates are timelyand accurately reflected in reporting materials.
• Support updates to Risk Tolerance Dashboards, Risk Tolerance Statements, and related enterprise metric repositories through data preparation, quality review, and narrative support.
• Assistwith reporting platform and dashboard maintenance, including IBM BPM workflows, Power BI dashboards, standardized templates, CLAW integration, and future SmartSuite reporting capabilities.
• Partner with metric owners and managers to reinforce consistent data submission, interpretation, evidence standards, and reporting timelines.
• Identifyrecurring data quality issues, reporting gaps, control weaknesses, or thematic trends and elevate insights to program leadership for review and credible challenge.
• Support automation, process improvement, and modernization efforts that improve reporting timeliness, reduce manual rework, and strengthen traceability across the metrics lifecycle.

Requirements

• 4–6 years of experience in cybersecurity risk, technology risk, GRC, risk analytics, metrics reporting, or data governance.
• Strong analytical, documentation, and quality review skills with high attention to detail and evidence standards.
• Experience supporting risk metrics, KRIs/KPIs, dashboards, executive reporting, or governance committee materials in a regulated environment preferred.
• Experience with data visualization tools, reporting platforms, or data warehouses such as Power BI, Snowflake, IBM BPM, SmartSuite, CLAW, or similar tools.