Senior Cyber Risk Analyst - Hybrid (GRC & Data)

Pittsburgh Tomorrow; Pittsburgh (Allegheny County); Ibrido; USD 110.000 - 150.000; Tempo pieno

Descrizione del lavoro

Life in Pittsburgh is seeking a Cybersecurity Risk Analyst III in Pittsburgh, PA, for a hybrid schedule with four days onsite. You will assess risks, identify gaps, and drive remediation across the organization, partnering with control owners to challenge mitigation strategies.

Responsibilities include tracking issues in ServiceNow, analyzing data with BI tools, and communicating findings to senior management while ensuring alignment with NIST/ISO controls and cyber hygiene across IT and

Competenze

• 7+ years of professional cybersecurity/tech experience.
• Experience with information security GRC.
• Strong analytical, investigative, and troubleshooting skills.
• Experience with data analysis and reporting tools (SQL, DB2, Power BI, Tableau, Excel, etc.).
• Familiarity with ServiceNow and risk management processes.
• Excellent written and verbal communication and stakeholder management.

Mansioni

• Analyze cybersecurity risks, control gaps, and findings to develop actionable recommendations and mitigation strategies.
• Challenge control owners on remediation plans, evaluate compensating controls, and assess residual risk.
• Track cybersecurity issues, risks, and remediation activities through ServiceNow.
• Analyze data and reporting dashboards to identify trends, operational roadblocks, and opportunities to improve control effectiveness.
• Communicate risk assessments, findings, and recommendations to stakeholders and senior management.
• Collaborate with Information Security, IT, and business teams to support continuous cyber hygiene and control effectiveness.
• Ensure risk management activities align with applicable cybersecurity standards and frameworks (e.g., NIST SP 800-53, NIST CSF, ISO).

Conoscenze

GRC experience

Analytical skills

Stakeholder management

Communication

Risk assessment

Problem-solving

Strumenti

SQL

DB2

Power BI

Business Objects

Qlik

Tableau

Excel

ServiceNow

Descrizione del lavoro

Life in Pittsburgh is seeking a Cybersecurity Risk Analyst III in Pittsburgh, PA, for a hybrid schedule with four days onsite. You will assess risks, identify gaps, and drive remediation across the organization, partnering with control owners to challenge mitigation strategies.

Responsibilities include tracking issues in ServiceNow, analyzing data with BI tools, and communicating findings to senior management while ensuring alignment with NIST/ISO controls and cyber hygiene across IT and