Technology & Cybersecurity Risk Management Analyst

Appathon.Ai; Plano (TX); On-site; USD 70,000 - 95,000; Full time

Job summary

Upslea is seeking a Technology & Cybersecurity Risk Management Analyst to support enterprise risk management initiatives. You will assess technology and cybersecurity risks, evaluate controls, and develop risk reporting for leadership.

The role requires 1–3 years in cybersecurity or IT risk, knowledge of NIST/COBIT/ISO 27001, and strong communication skills to diverse stakeholders across technology, business, and control owners.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, CS, Business, or related field (or equivalent).
• 1–3 years of experience in cybersecurity, IT risk, technology risk, compliance or governance.
• Understanding of cybersecurity principles, controls, risk assessment and risk mitigation.
• Knowledge of NIST, COBIT and ISO 27001.
• Strong analytical, organizational, documentation and communication skills.
• Ability to manage multiple stakeholders and priorities.

Responsibilities

• Conduct technology and cybersecurity risk assessments and stakeholder discussions.
• Identify, document, and monitor technology and cybersecurity risks.
• Evaluate security controls and map risks to controls, policies, and frameworks.
• Support control walkthroughs and risk assessments with control owners.
• Document risks, findings, evidence, and assessment results.
• Track remediation activities and escalate overdue or significant risk issues.
• Maintain risk information within GRC and risk management tools.
• Prepare risk reports, dashboards, and presentations for leadership.
• Communicate cybersecurity risks to technical and non-technical stakeholders.
• Support continuous improvement of risk management and governance processes.

Skills

Risk assessments

Stakeholder management

Controls evaluation

Reporting

GRC tooling

Documentation

Communication

Analytical thinking

Education

Bachelor’s degree or equivalent experience

Tools

ServiceNow

MS Excel

PowerPoint

MS Word

GRC tools

NIST

COBIT

ISO 27001

Job description

About The Role

Upslea is seeking a Technology & Cybersecurity Risk Management Analyst to support enterprise technology and cybersecurity risk management initiatives. In this role, you will assess technology and cybersecurity risks, evaluate security controls, support remediation activities, and develop risk reporting and governance materials. You will work closely with cybersecurity, technology, business, and control owners across the organization.

Key Responsibilities

• Conduct technology and cybersecurity risk assessments and stakeholder discussions.
• Identify, document, and monitor technology and cybersecurity risks.
• Evaluate security controls and map risks to controls, policies, and frameworks.
• Support control walkthroughs and risk assessments with control owners.
• Document risks, findings, evidence, and assessment results.
• Track remediation activities and *escalate overdue or significant risk issues.*
• Maintain risk information within GRC and risk management tools.
• Prepare risk reports, dashboards, and presentations for leadership.
• Communicate cybersecurity risks to technical and non-technical stakeholders.
• Support continuous improvement of risk management and governance processes.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Business, or related field, or equivalent experience.
• 1–3 years of experience in cybersecurity, IT risk, technology risk, compliance, or governance.
• Understanding of cybersecurity principles, controls, risk assessment, and risk mitigation.
• Knowledge of NIST, COBIT, and ISO 27001.
• Strong analytical, organizational, documentation, and communication skills.
• Ability to manage multiple stakeholders and priorities.

Tools & Technology

• ServiceNow
• Microsoft Excel, PowerPoint, and Word
• Microsoft Copilot
• GRC / Risk Management tools
• NIST, COBIT, and ISO 27001