Information Security Risk Analyst

Strive Solutions; Johnston (RI); On-site; USD 90,000 - 150,000; Full time

Job summary

Strive Solutions is seeking a Senior Information Security Risk Analyst to lead cyber and technology risk activities across the organization. The role focuses on conducting risk assessments for applications, infrastructure, and third-party vendors, identifying control gaps, and driving remediation plans.

Qualified candidates will translate findings into actionable recommendations, maintain risk registers and metrics, and support incident response activities while aligning with established

Qualifications

• Strong understanding of information security risk management and control evaluation.
• Experience assessing technical environments and vendor security posture.
• Ability to translate findings into actionable remediation recommendations.
• Proficiency producing risk reporting and metrics aligned to security standards.
• Collaboration and communication skills to influence stakeholders across the organization.

Responsibilities

• Lead detailed risk assessments for applications, infrastructure, and third-party vendors.
• Identify control gaps and recommend remediation and mitigation plans.
• Partner with IT, security, and business stakeholders to drive risk-informed decisions.
• Maintain risk registers, risk metrics, and reporting aligned to recognized frameworks (e.g., NIST, ISO 27001).
• Support information security policy development and third-party risk reviews.
• Contribute to incident response activities and support improvements to security controls.

Skills

Information risk mgmt

Vendor risk assessment

Remediation planning

Risk reporting & metrics

Stakeholder communication

Tools

NIST CSF

ISO 27001

Job description

Senior Information Security Risk Analyst to lead cyber and technology risk activities across the organization.

Key Responsibilities

• Conduct detailed risk assessments for applications, infrastructure, and third-party vendors.
• Identify control gaps and recommend pragmatic remediation and mitigation plans.
• Partner with IT, security, and business stakeholders to drive risk-informed decisions.
• Maintain risk registers, risk metrics, and reporting aligned to recognized frameworks (e.g., NIST, ISO 27001).
• Support information security policy development and third-party risk reviews.
• Contribute to incident response activities and support improvements to security controls.

Required Qualifications & Skills

• Strong understanding of information security risk management and control evaluation.
• Experience assessing technical environments and vendor security posture.
• Ability to translate findings into actionable remediation recommendations.
• Proficiency producing risk reporting and metrics aligned to security standards.
• Collaboration and communication skills to influence stakeholders across the organization.