Technology & Cybersecurity Risk Management Analyst

Appathon; Plano (TX); On-site; USD 55,000 - 62,000; Full time

Job summary

Upslea is seeking a Technology & Cybersecurity Risk Management Analyst to support enterprise technology and cybersecurity risk initiatives. You will assess risks, evaluate controls, and develop governance materials while collaborating with cybersecurity, technology, and business teams.

The ideal candidate has 1–3 years in cybersecurity or IT risk, a Bachelor's degree, and knowledge of NIST, COBIT, ISO 27001. Proficiency with ServiceNow and GRC tools is a plus; strong communication is required.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS, Business, or related field or equivalent experience.
• 1–3 years of cybersecurity or IT risk, compliance, or governance experience.
• Knowledge of cybersecurity principles, controls, risk assessment, and risk mitigation.
• Familiarity with NIST, COBIT, and ISO 27001.

Responsibilities

• Conduct technology and cybersecurity risk assessments and stakeholder discussions.
• Identify, document, and monitor technology and cybersecurity risks.
• Evaluate security controls and map risks to controls, policies, and frameworks.
• Support control walkthroughs and risk assessments with control owners.
• Document risks, findings, evidence, and assessment results.
• Track remediation activities and elevate overdue or significant risk issues.
• Maintain risk information within GRC and risk management tools.
• Prepare risk reports, dashboards and presentations for leadership.
• Communicate cybersecurity risks to technical and non-technical stakeholders.
• Support continuous improvement of risk management and governance processes.

Skills

Cybersecurity

IT risk

Risk assessment

Documentation

Communication

Stakeholder management

Education

Bachelor's degree

Tools

ServiceNow

Excel

PowerPoint

Word

GRC tools

NIST/COBIT/ISO 27001

Job description

Technology & Cybersecurity Risk Management Analyst

Location

Job Type

40.00 - 45.00

Deadline

Not specified

Education

Bachelor

Experience

About the Role

About the Role

Upslea is seeking a Technology & Cybersecurity Risk Management Analyst to support enterprise technology and cybersecurity risk management initiatives.

In this role, you will assess technology and cybersecurity risks, evaluate security controls, support remediation activities, and develop risk reporting and governance materials. You will work closely with cybersecurity, technology, business, and control owners across the organization.

Key Responsibilities

• Conduct technology and cybersecurity risk assessments and stakeholder discussions.
• Identify, document, and monitor technology and cybersecurity risks.
• Evaluate security controls and map risks to controls, policies, and frameworks.
• Support control walkthroughs and risk assessments with control owners.
• Document risks, findings, evidence, and assessment results.
• Track remediation activities and elevate overdue or significant risk issues.
• Maintain risk information within GRC and risk management tools.
• Prepare risk reports, dashboards and presentations for leadership.
• Communicate cybersecurity risks to technical and non-technical stakeholders.
• Support continuous improvement of risk management and governance processes.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Business, or related field, or equivalent experience.
• 1–3 years of experience in cybersecurity, IT risk, technology risk, compliance, or governance.
• Understanding of cybersecurity principles, controls, risk assessment, and risk mitigation.
• Knowledge of NIST, COBIT, and ISO 27001.
• Strong analytical, organizational, documentation, and communication skills.
• Ability to manage multiple stakeholders and priorities.

Tools & Technology

• ServiceNow
• Microsoft Excel, PowerPoint, and Word
• GRC / Risk Management tools
• NIST, COBIT, and ISO 27001

Ideal Candidate

A detail-oriented cybersecurity or technology risk professional who can clearly communicate risks, control gaps, and remediation requirements while maintaining accurate documentation and supporting multiple initiatives.

Upslea is an Equal Employment Opportunity (EEO) employer. We are committed to providing equal employment opportunities to all qualified applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by applicable law.

Skills

COBIT compliance cybersecurity governance InformationSecurity ISO27001 IT risk RiskAnalyst technology risk