Hybrid Cyber Risk Analyst: Cloud & Vendor Security

Global Sports Jobs Limited; Nashville (TN); Hybrid; USD 95,000 - 140,000; Full time

Benefits offered by this job

Medical insurance

Telemedicine

Paid vacation and holidays

Sick time

Parental leave

Educational assistance

Mental health resources

401K plan

Commuter benefits

Discretionary bonus

Job summary

Creative Artists Agency (CAA) seeks an experienced Information Security professional to deliver security services across IT and cloud environments. The role emphasizes risk management, vendor assessments, and early security integration in projects.

You will coordinate with business units, ensure secure deployments, and develop metrics to prove control effectiveness. Hybrid work in Nashville is offered, with a strong emphasis on cross‑functional collaboration.

Qualifications

• This role requires 3–4 years in IT and at least 2 years in cybersecurity risk management.
• Familiarity with security frameworks (NIST, ISO 27001), data privacy regulations (GDPR, CCPA), and attestations (SOC, ISO, PCI DSS, FedRAMP).
• Experience coordinating security tooling integrations and reviewing vendor security postures.

Responsibilities

• Support vendor management programme with risk reviews and renewals.
• Conduct security assessments for vendors, products, and applications.
• Partner with business teams to improve security workflows and integrations.
• Coordinate security integrations (SSO, logs, secrets, alerting) across environments.
• Develop security metrics to measure effectiveness of controls.

Skills

Analytical skills

Vendor risk assessment

Security analytics tools

Due diligence

Cloud security

Security integrations

NIST/ISO familiarity

IR coordination

Communication

Education

Bachelor's or Master's in a relevant field

Tools

Azure

AWS

Splunk

OneTrust

SIG (GRC)

Job description

Creative Artists Agency (CAA) seeks an experienced Information Security professional to deliver security services across IT and cloud environments. The role emphasizes risk management, vendor assessments, and early security integration in projects.

You will coordinate with business units, ensure secure deployments, and develop metrics to prove control effectiveness. Hybrid work in Nashville is offered, with a strong emphasis on cross‑functional collaboration.