Technology & Cybersecurity Risk Management Analyst

Appathon; Plano (TX); On-site; USD 55,000 - 61,000; Full time

Job summary

Upslea is seeking a Technology & Cybersecurity Risk Management Analyst to support enterprise technology and cybersecurity risk initiatives. You will assess risks, evaluate controls, support remediation, and develop governance materials for leadership.

You will collaborate with cybersecurity, technology, business, and control owners across the organization to ensure risk-informed decision making and continuous improvement of governance processes.

Qualifications

• Bachelor's degree in a tech or business field or equivalent experience.
• 1–3 years of cybersecurity or IT risk experience.
• Understanding of cybersecurity principles, controls, and risk mitigation.
• Familiar with NIST, COBIT, and ISO 27001.

Responsibilities

• Conduct risk assessments and stakeholder discussions.
• Identify, document, and monitor technology and cybersecurity risks.
• Evaluate security controls and map risks to policies and frameworks.
• Support control walkthroughs and risk assessments with owners.
• Document risks, findings, evidence, and assessment results.
• Track remediation activities and overdue risk issues.
• Maintain risk information in GRC systems.
• Prepare risk reports and dashboards for leadership.
• Communicate cybersecurity risks to technical and non-technical audiences.
• Support continuous improvement of risk governance processes.

Skills

COBIT

Cybersecurity

Governance

Information Security

ISO27001

IT risk

Risk analysis

Technology risk

Stakeholder management

Education

Bachelor

Tools

ServiceNow

MS Excel

PowerPoint

GRC tools

Job description

Technology & Cybersecurity Risk Management Analyst

Location

Job Type

40.00 - 44.00

Deadline

Not specified

Education

Bachelor

Experience

Entry Level

About the Role

Upslea is seeking a Technology & Cybersecurity Risk Management Analyst to support enterprise technology and cybersecurity risk management initiatives.

In this role, you will assess technology and cybersecurity risks, evaluate security controls, support remediation activities, and develop risk reporting and governance materials. You will work closely with cybersecurity, technology, business, and control owners across the organization.

Key Responsibilities

• Conduct technology and cybersecurity risk assessments and stakeholder discussions.
• Identify, document, and monitor technology and cybersecurity risks.
• Evaluate security controls and map risks to controls, policies, and frameworks.
• Support control walkthroughs and risk assessments with control owners.
• Document risks, findings, evidence, and assessment results.
• Track remediation activities and escalated overdue or significant risk issues.
• Maintain risk information within GRC and risk management tools.
• Prepare risk reports, dashboards, and presentations for leadership.
• Communicate cybersecurity risks to technical and non-technical stakeholders.
• Support continuous improvement of risk management and governance processes.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Business, or related field, or equivalent experience.
• 1–3 years of experience in cybersecurity, IT risk, technology risk, compliance, or governance.
• Understanding of cybersecurity principles, controls, risk assessment, and risk mitigation.
• Knowledge of NIST, COBIT, and ISO 27001.
• Strong analytical, organizational, documentation, and communication skills.
• Ability to manage multiple stakeholders and priorities.

Tools & Technology

• ServiceNow
• Microsoft Excel, PowerPoint, and Word
• GRC / Risk Management tools
• NIST, COBIT, and ISO 27001

Skills

COBIT compliance cybersecurity governance InformationSecurity ISO27001 IT risk RiskAnalyst technology risk