Cybersecurity Risk Analyst
Location: Carmel, IN | Type: Full-time | Posted: 4 Days Ago | Requisition ID: R-009877
The Cybersecurity Risk Analyst maintains and optimizes tools, dashboards, and data pipelines for risk intake and triage. Automates routine processes to enhance accuracy, speed, and consistency in risk data management.
Job Duties and Responsibilities:
- Tooling, Dashboarding, and Automation (40%)
- Manage daily operations of risk data infrastructure, including dashboards, intake tools, alert routing, and enrichment scripts, ensuring accuracy and availability.
- Oversee quality control of risk data intake, infrastructure, and intelligence feeds, including dashboards and automation scripts.
- Conduct automated validation checks to ensure correct data ingestion and categorization.
- Troubleshoot alert routing and enrichment issues.
- Resolve issues with risk data infrastructure and feeds.
Risk Data Intake & Triage (25%)- Assist with initial filtering, routing, and organization of incoming data such as audit findings, vendor assessments, and threat alerts.
- Perform preliminary risk triage using predefined categorization logic.
- Determine routing rules based on severity, asset type, and regulatory impact.
- Tag and assign records to appropriate analysts or stakeholders.
- Ensure risk signals are captured, validated, and integrated into broader workflows.
Data Quality & Completeness (15%)- Perform validation checks, flag anomalies, and ensure data consistency.
- Address breakdowns in alert routing or enrichment scripts, identifying gaps or errors.
- Document discrepancies and escalate issues as needed.
- Support remediation by revalidating updated data.
Support Cybersecurity Third-Party Risk Review Operations (10%)- Assist with vendor security risk assessments, identifying control gaps and elevated risks.
- Apply criteria to assess vendor impact, including data access and regulatory exposure.
- Review vendor security feeds for risks.
- Evaluate vendors based on access, system integration, and frameworks like SOC 2 or NIST.
- Prioritize submissions and route high-risk vendors for senior review.
Document Processes (10%)- Maintain current operational documentation to support audits and continuity.
Qualifications:
- Bachelor’s degree in Cybersecurity, Information Systems, Risk Management, or related field, or equivalent experience.
- 1-2 years of relevant work experience.
- Preferred certifications include: GIAC Security Essentials (GSEC), Microsoft SC-900, or AWS Certified Cloud Practitioner.
We offer comprehensive benefits including medical, dental, vision insurance; company-paid life and disability coverage; 401k with match; three weeks PTO; and career growth opportunities. Allied is committed to diversity and equal employment opportunity.