Senior Cyber Risk Analyst

Eliassen Group; Pittsburgh (Allegheny County); Hybrid; USD 69,000 - 83,000; Full time

Job summary

Eliassen Group's client in Pittsburgh seeks a Cyber Risk professional with strong Identity & Access Management experience to identify, analyze, and remediate cyber and control risks across a large enterprise. The role partners with senior leadership, coordinates remediation via ServiceNow, and produces executive reporting with Power BI.

Hybrid role in Pittsburgh, PA with W-2 employment benefits. Requires 7+ years in information security or related fields and a Bachelor's degree in CS or

Qualifications

• 7+ years of information security, cyber risk, or GRC experience.
• Strong IAM experience and ability to lead risk initiatives.
• Experience communicating with senior leadership and stakeholders.
• Proficient in risk analysis, control assessment, and remediation planning.
• Experience with ServiceNow for issue tracking and remediation.
• Experience building dashboards in Power BI or similar tools.
• Understanding of SDLC and technology control environments.
• Financial services or securities background is a plus.

Responsibilities

• Lead and coordinate IAM and cyber risk initiatives.
• Review and analyze complex datasets to identify risks, trends, and control gaps.
• Develop actionable recommendations and remediation plans.
• Track control issues, risk findings, and remediation activities through ServiceNow.
• Create executive-level reporting and dashboards using Power BI and other tools.
• Escalate high-risk activities and ensure appropriate risk treatment plans are implemented.

Skills

IAM

Cyber Risk

GRC

Executive communication

Data analysis

Education

Bachelor's degree in Computer Science or Information Security

Tools

Power BI

Tableau

SQL

ServiceNow

Job description

Hybrid 4 days onsite in Pittsburgh, PA

Our client seeks a Cyber Risk professional with strong Identity & Access Management experience to identify, analyze, and remediate cyber and control-related risks across a large enterprise. The role will partner with senior leadership, coordinate remediation through ServiceNow, and produce executive reporting with Power BI. The professional will assess control effectiveness, challenge control owners, drive risk treatment plans, and communicate status and residual risk to stakeholders.

Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Rate: $50.00 to $60.00/hr. w2

Responsibilities

• Lead and coordinate IAM and cyber risk initiatives.
• Review and analyze complex datasets to identify risks, trends, and control gaps.
• Develop actionable recommendations and remediation plans.
• Track control issues, risk findings, and remediation activities through ServiceNow.
• Create executive-level reporting and dashboards using Power BI and other tools.
• Escalate high-risk activities and ensure appropriate risk treatment plans are implemented.
• Identify operational roadblocks and drive timely resolution.
• Partner with Information Security, Technology, Risk, and Business stakeholders.
• Support cyber hygiene initiatives and continuous control improvement.
• Aggregate and analyze automated and self-identified risk findings across multiple sources.
• Consult with technical teams on security controls, governance, and risk management practices.
• Assess cyber control effectiveness across domains including IAM, vulnerability management, information protection, and insider threat.
• Challenge control owners when deficiencies exist and measure residual risk after improvements.

Experience Requirements

• 7+ years of Information Security, Cyber Risk, GRC, IAM, or related experience.
• Strong Identity & Access Management experience.
• Proven project management and coordination skills.
• Experience communicating with senior leadership and executive stakeholders.
• Strong analytical, troubleshooting, and problem-solving skills.
• Experience with ServiceNow for control issue management and remediation tracking.
• Experience with Power BI and dashboard/report development.
• Background in risk analysis, control assessment, and risk remediation.
• Understanding of SDLC and technology control environments.
• Excellent written and verbal communication skills.
• Preferred: Financial services or securities industry experience.
• Preferred: GRC programs and frameworks exposure.
• Preferred: SQL and database analysis skills; DB2 is a plus.
• Preferred: Experience with Tableau, Qlik, Business Objects, or advanced Excel.
• Preferred: Regulatory examination or Internal Audit support experience.

Education Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field preferred.