Senior Cyber Risk Analyst - Hybrid

Informa Group; Newton (MA); Hybrid; USD 150,000 - 170,000; Full time

Benefits offered by this job

Great community

Time off & holidays

401(k) match

Health, vision & dental insurance

Remote/hybrid flexibility

Job summary

Informa TechTarget in Newton, MA seeks an experienced Senior Cyber Risk Analyst to lead enterprise cybersecurity risk management across the organization. You will partner with engineering and security teams, assess threats and vulnerabilities, and report to executives on risk posture and trends.

The role includes emerging responsibilities in AI governance and technology risk as part of an integrated risk program.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Risk Management, CS or IT
• 5–8 years of progressive cybersecurity risk management experience
• Experience conducting enterprise cyber risk assessments in complex tech environments
• Experience with cloud security risk assessment and cloud platforms (AWS/Azure/GCP)
• Third-party risk management and vendor security assessments

Responsibilities

• Lead enterprise-wide cyber risk assessments across business operations, systems and infrastructure
• Identify and evaluate cybersecurity risks including threats, vulnerabilities and impacts
• Maintain enterprise risk registers and mitigation plans
• Provide executive reporting on risk posture and trends
• Collaborate with engineering, IT, security and product teams on risk initiatives
• Quantify risk using NIST CSF, ISO 27005, FAIR

Skills

Cyber risk management

Executive communication

Risk assessment frameworks

Cloud security

Vulnerability management

Third-party risk

Governance & compliance

Data privacy & AI governance

Education

Bachelor's degree in Cybersecurity or related field

Tools

AWS

Azure

GCP

SOC 2

ISO 27001

NIST

Job description

Informa TechTarget in Newton, MA seeks an experienced Senior Cyber Risk Analyst to lead enterprise cybersecurity risk management across the organization. You will partner with engineering and security teams, assess threats and vulnerabilities, and report to executives on risk posture and trends.

The role includes emerging responsibilities in AI governance and technology risk as part of an integrated risk program.