Cybersecurity Risk Analyst (Hybrid) - Risk & Awareness

PPL Corporation; Allentown (Lehigh County); Hybrid; USD 80,000 - 110,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

PPL Corporation in Allentown, PA seeks an Intermediate Cybersecurity Risk Analyst to execute cybersecurity and IT risk assessment activities, analyze risk exposures, document findings, and support risk mitigation across the enterprise. The role involves collaborating with cybersecurity, IT, and business stakeholders to evaluate risks and strengthen the risk management program.

The position emphasizes maintaining risk registers, dashboards, and reporting inputs, while monitoring threats and

Qualifications

• Bachelor's Degree in Cybersecurity, Information Technology, Risk Management, Computer Science, Computer Information Systems, Business, or a related field.
• 2+ years of related experience in cybersecurity, IT risk management, IT audit, information security, technology compliance, infrastructure, cloud, application security, or related IT field.
• Working knowledge of cybersecurity risk management concepts, control frameworks, and risk assessment methodologies, such as NIST CSF, NIST RMF, CIS Controls, COBIT, ISO 27001, or FAIR.
• Strong written and verbal communication skills, including the ability to translate technical risk information into clear business terms, prepare concise documentation, and escalation high‑risk issues appropriately.
• 3+ years of experience in cybersecurity, IT risk management, IT audit, technology compliance, or related field.
• Relevant professional certification such as Security+, GSEC, SSCP, CRISC, CISA, CISM, CGRC, or equivalent.
• Experience preparing risk assessments, risk register entries, treatment plans, control observations, dashboards, or stakeholder reporting.
• Experience using GRC, IRM, audit, compliance, or risk management platforms such as ServiceNow IRM, Archer, and OneTrust.
• Familiarity with data analysis, reporting, automation, or scripting tools such as Python, PowerShell, Power BI, SQL, or similar technologies.
• Familiarity with enterprise technology environments, including cloud services, infrastructure, networking, identity and access management, applications, or hybrid environments.

Responsibilities

• Support cybersecurity awareness activities, including coordinating phishing simulations, drafting awareness communications, tracking participation or engagement metrics, and helping identify opportunities to improve employee security behaviors and risk‑informed decision‑making.
• Collaborate with cybersecurity, IT, and business stakeholders to gather risk information, assess risk exposure, document conclusions, and support mitigation planning.
• Conduct cybersecurity and IT risk assessments for systems, applications, third parties, technologies, or business processes using established risk methodologies and guidance.
• Maintain risk register entries, assessment records, dashboards, and reporting inputs to support accurate and timely cybersecurity risk reporting.
• Analyze risk data, identify trends or recurring issues, and prepare clear summaries to support management review, escalation, and decision‑making.
• Support the review, maintenance, and improvement of cybersecurity policies, standards, procedures, and risk management practices.
• Monitor emerging threats, vulnerabilities, control issues, and regulatory or framework changes, and assist in assessing potential impacts to cybersecurity and IT risk.
• Contribute to team knowledge sharing by documenting procedures, sharing lessons learned, and supporting onboarding or peer learning as needed.
• Support incident response and post‑incident risk analysis by reviewing relevant information, documenting risk implications, and helping identify control gaps or improvement opportunities.
• All other duties and projects as assigned.
• Performs other duties as assigned.
• Complies with all policies and standards.

Skills

Communication skills

Risk management concepts

Analytical thinking

Education

Bachelor's Degree in Cybersecurity/IT/CS/related field

Tools

ServiceNow IRM

Archer

OneTrust

Power BI

SQL

Python

PowerShell

Job description

PPL Corporation in Allentown, PA seeks an Intermediate Cybersecurity Risk Analyst to execute cybersecurity and IT risk assessment activities, analyze risk exposures, document findings, and support risk mitigation across the enterprise. The role involves collaborating with cybersecurity, IT, and business stakeholders to evaluate risks and strengthen the risk management program.

The position emphasizes maintaining risk registers, dashboards, and reporting inputs, while monitoring threats and