Global Cyber Risk Analyst — Hybrid, Contract-to-Hire

Cypress HCM; Northbrook (IL); Hybrid; USD 62,000 - 76,000; Full time

Job summary

Cypress HCM is seeking a Global Cybersecurity Risk Analyst to support enterprise information security, risk, and third‑party risk management initiatives. You will assess risks related to technologies, initiatives, applications, and external vendors, helping stakeholders understand exposures and drive informed risk decisions.

The ideal candidate brings hands-on risk assessment experience with vendor risk management, security controls, and regulatory requirements.

Qualifications

• Bachelor’s degree or equivalent in cybersecurity, information security, or related field.
• 2+ years in cybersecurity, information security, GRC, or related area.
• Experience with Vendor Risk Management and risk assessments.
• Familiarity with NIST, ISO 27001, COBIT, or FAIR frameworks.

Responsibilities

• Conduct cybersecurity and information risk assessments for technologies, apps, and third‑party providers.
• Document risk scenarios, assets, threats, vulnerabilities, controls, likelihood, and impacts.
• Evaluate security controls and advise remediation and compensating controls.
• Communicate findings to business stakeholders and risk owners.
• Support risk-based decisions including acceptance, mitigation, transfer, and avoidance.
• Maintain risk registers and track remediation activities through closure.
• Use ServiceNow for vendor risk assessments and documentation.

Skills

Analytical thinking

Communication

Multitasking

Risk documentation

Education

Bachelor’s degree in Business/CS/Cybersecurity/InfoSec

Tools

ServiceNow

Job description

Cypress HCM is seeking a Global Cybersecurity Risk Analyst to support enterprise information security, risk, and third‑party risk management initiatives. You will assess risks related to technologies, initiatives, applications, and external vendors, helping stakeholders understand exposures and drive informed risk decisions.

The ideal candidate brings hands-on risk assessment experience with vendor risk management, security controls, and regulatory requirements.