Strategic Cyber Risk & Controls Analyst

Appathon.Ai; Plano (TX); Presencial; USD 70.000 - 95.000; Jornada completa

Descripción de la vacante

Upslea is seeking a Technology & Cybersecurity Risk Management Analyst to support enterprise risk management initiatives. You will assess technology and cybersecurity risks, evaluate controls, and develop risk reporting for leadership.

The role requires 1–3 years in cybersecurity or IT risk, knowledge of NIST/COBIT/ISO 27001, and strong communication skills to diverse stakeholders across technology, business, and control owners.

Formación

• Bachelor’s degree in Cybersecurity, IT, CS, Business, or related field (or equivalent).
• 1–3 years of experience in cybersecurity, IT risk, technology risk, compliance or governance.
• Understanding of cybersecurity principles, controls, risk assessment and risk mitigation.
• Knowledge of NIST, COBIT and ISO 27001.
• Strong analytical, organizational, documentation and communication skills.
• Ability to manage multiple stakeholders and priorities.

Responsabilidades

• Conduct technology and cybersecurity risk assessments and stakeholder discussions.
• Identify, document, and monitor technology and cybersecurity risks.
• Evaluate security controls and map risks to controls, policies, and frameworks.
• Support control walkthroughs and risk assessments with control owners.
• Document risks, findings, evidence, and assessment results.
• Track remediation activities and escalate overdue or significant risk issues.
• Maintain risk information within GRC and risk management tools.
• Prepare risk reports, dashboards, and presentations for leadership.
• Communicate cybersecurity risks to technical and non-technical stakeholders.
• Support continuous improvement of risk management and governance processes.

Conocimientos

Risk assessments

Stakeholder management

Controls evaluation

Reporting

GRC tooling

Documentation

Communication

Analytical thinking

Educación

Bachelor’s degree or equivalent experience

Herramientas

ServiceNow

MS Excel

PowerPoint

MS Word

GRC tools

NIST

COBIT

ISO 27001

Descripción del empleo

Upslea is seeking a Technology & Cybersecurity Risk Management Analyst to support enterprise risk management initiatives. You will assess technology and cybersecurity risks, evaluate controls, and develop risk reporting for leadership.

The role requires 1–3 years in cybersecurity or IT risk, knowledge of NIST/COBIT/ISO 27001, and strong communication skills to diverse stakeholders across technology, business, and control owners.