Cybersecurity Risk Analyst II: IT Risk & GRC

Western & Southern Financial Group; Cincinnati (OH); On-site; USD 75,000 - 110,000; Full time

Job summary

Western & Southern Financial Group is seeking a Cybersecurity Risk Analyst II to assist with identifying, analyzing, reporting and recommending treatments for cybersecurity risks across the organization. You will work with supervision from senior risk leaders and guide junior resources as needed.

The role emphasizes risk-based IT controls, assessment execution and collaboration with IT leadership to strengthen risk posture and governance across diverse services and technologies.

Qualifications

• Bachelor's degree with 2–3 years of work experience in IT risk/security, IT audit or IT compliance.
• Strong understanding of cybersecurity risk and control concepts.
• Experience with cybersecurity risk and compliance frameworks such as NIST, ISO, COBIT, COSO.

Responsibilities

• Supports the Cybersecurity Risk Management function with operational aspects of cybersecurity risk management, assessments, technology evaluation and attestation.
• Performs third-party security risk assessments and monitors open risk items pertaining to vendors.
• Coordinates with stakeholders to support due diligence inquiries, tracking, reporting and escalation as needed.
• Maintains relationships with IT leadership and other teams to measure impact of risk management activities.
• Assists with maturity enhancement of the Technology Risk Management program and builds new processes and tools.

Skills

IT risk

Cybersecurity

Risk assessment

Communication

MS Office

Problem solving

Education

Bachelor's degree

Tools

GRC tools

Job description

Western & Southern Financial Group is seeking a Cybersecurity Risk Analyst II to assist with identifying, analyzing, reporting and recommending treatments for cybersecurity risks across the organization. You will work with supervision from senior risk leaders and guide junior resources as needed.

The role emphasizes risk-based IT controls, assessment execution and collaboration with IT leadership to strengthen risk posture and governance across diverse services and technologies.