Technology & Cybersecurity Risk Management Analyst

Appathon.Ai; Plano (TX); On-site; USD 65,000 - 90,000; Full time

Job summary

Appathon.Ai in Plano, TX is seeking a Technology & Cybersecurity Risk Management Analyst with 1–3 years of experience to support enterprise risk initiatives and governance.

You will conduct technology and cybersecurity risk assessments, document findings, map risks to controls, and deliver risk reports and dashboards for stakeholders, aligning with NIST, COBIT, and ISO 27001. Collaborate with technical and business teams, escalate issues, and track remediation through to closure.

Qualifications

• Bachelor's degree or equivalent professional experience.
• Foundational cybersecurity principles and risk assessment understanding.
• Experience with multiple stakeholders and documentation.
• Knowledge of NIST, COBIT, and ISO 27001 frameworks.

Responsibilities

• Conduct technology and cybersecurity risk assessments and stakeholder discussions.
• Identify and evaluate inherent, residual, and emerging risks.
• Assess security controls and their effectiveness.
• Map risks to controls, policies, and compliance frameworks.
• Prepare risk reports and governance presentations for stakeholders.
• Coordinate risk activities across technical and business teams.

Skills

Analytical skills

Documentation

Project coordination

Communication skills

Education

Bachelor's degree

Tools

ServiceNow

Excel

PowerPoint

Word

Copilot

GRC Tools

NIST

COBIT

ISO 27001

Job description

We're Hiring: Technology & Cybersecurity Risk Management Analyst

Division: Cybersecurity

Location: Plano, Texas

Experience Required: 1–3 Years

We are seeking a detail-oriented Technology & Cybersecurity Risk Management Analyst to support enterprise technology and cybersecurity risk management initiatives.

The ideal candidate will have foundational experience in cybersecurity, IT risk, technology risk management, compliance, or governance, along with knowledge of industry frameworks such as NIST, COBIT, and ISO 27001.

Key Responsibilities

• Conduct technology and cybersecurity risk assessments, intake, triage, and stakeholder discussions.
• Identify, document, and evaluate inherent, residual, and emerging technology risks.
• Assess security controls and evaluate their effectiveness in mitigating identified risks.
• Map risks to security controls, policies, and applicable compliance frameworks.
• Facilitate control walkthroughs and risk discussions with control owners and business stakeholders.
• Document risk statements, controls, supporting evidence, assessment findings, and recommendations.
• Develop risk treatment and mitigation recommendations.
• Track remediation activities and follow up on outstanding action items through closure.
• Escalate overdue remediation activities and significant control or compliance concerns.
• Prepare risk reports, dashboards, and governance presentations for stakeholders.
• Coordinate risk management activities across technical and business teams.

Key Responsibilities

• Conduct technology and cybersecurity risk assessments, intake, triage, and stakeholder discussions.
• Identify, document, and evaluate inherent, residual, and emerging technology risks.
• Assess security controls and evaluate their effectiveness in mitigating identified risks.
• Map risks to security controls, policies, and applicable compliance frameworks.
• Facilitate control walkthroughs and risk discussions with control owners and business stakeholders.
• Document risk statements, controls, supporting evidence, assessment findings, and recommendations.
• Develop risk treatment and mitigation recommendations.
• Track remediation activities and follow up on outstanding action items through closure.
• Escalate overdue remediation activities and significant control or compliance concerns.
• Prepare risk reports, dashboards, and governance presentations for stakeholders.
• Coordinate risk management activities across technical and business teams.

Required Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field, or equivalent professional experience.
• 1–3 years of experience in cybersecurity, technology risk management, IT risk, compliance, governance, or a related discipline.
• Foundational understanding of cybersecurity principles, security controls, threats, and risk assessment methodologies.
• Knowledge of NIST, COBIT, and ISO 27001 frameworks.
• Understanding of control design, control effectiveness, and risk mitigation concepts.
• Experience supporting projects or initiatives involving multiple stakeholders.
• Strong analytical, organizational, documentation, and project coordination skills.
• Excellent written and verbal communication skills.

Required Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field, or equivalent professional experience.
• 1–3 years of experience in cybersecurity, technology risk management, IT risk, compliance, governance, or a related discipline.
• Foundational understanding of cybersecurity principles, security controls, threats, and risk assessment methodologies.
• Knowledge of NIST, COBIT, and ISO 27001 frameworks.
• Understanding of control design, control effectiveness, and risk mitigation concepts.
• Experience supporting projects or initiatives involving multiple stakeholders.
• Strong analytical, organizational, documentation, and project coordination skills.
• Excellent written and verbal communication skills.

Tools & Technologies

• ServiceNow Microsoft Excel, PowerPoint, and Word Microsoft Copilot Governance, Risk & Compliance (GRC) Tools NIST, COBIT, and ISO 27001

Tools & Technologies

• ServiceNow
• Microsoft Excel, PowerPoint, and Word
• Microsoft Copilot
• Governance, Risk & Compliance (GRC) Tools
• NIST, COBIT, and ISO 27001