Technology & Cybersecurity Risk Management Analyst

Finteksoft Inc; Plano (TX); On-site; USD 62,000 - 76,000; Full time

Benefits offered by this job

Dental insurance

Job summary

Finteksoft Inc in Plano, TX is seeking a Technology & Cybersecurity Risk Management Analyst to strengthen governance by assessing risk, evaluating controls, and reporting findings. The role is onsite in Plano, focusing on risk intake, control requirements, and remediation tracking.

Responsibilities include risk assessments, control design evaluation, risk mapping to frameworks, and preparing dashboards for leadership. Requires 7+ years in risk and GRC with NIST/COBIT/ISO 27001 experience.

Qualifications

• 7 years of experience in Technology Risk, Cybersecurity Risk Management, IT Risk, GRC, IT Audit, or Information Security.
• Hands-on knowledge with NIST, COBIT and ISO 27001 frameworks.
• Practical understanding of risk assessments, controls and remediation tracking.
• Experience identifying control gaps and evaluating control effectiveness.

Responsibilities

• Conduct technology and cybersecurity risk assessments, including risk intake and evaluation.
• Use NIST, COBIT, and ISO 27001 to assess security risks and define control requirements.
• Identify and document inherent risks, residual risks, emerging threats, and control gaps.
• Evaluate security control design and operating effectiveness.
• Map identified risks to applicable security controls, policies, and compliance frameworks.
• Run control walkthroughs and collaborate with control owners and stakeholders.
• Develop risk mitigation recommendations and monitor remediation through closure.
• Maintain risk registers, assessment docs, control evidence, and governance records.
• Prepare risk reports, dashboards, and presentations for management and leadership.
• Support continuous improvement of technology risk management processes.

Skills

Risk assessment

Documentation

Communication

Problem-solving

Education

Bachelor’s degree in IT / Cybersecurity / CS / Business

Tools

NIST

COBIT

ISO 27001

NIST CSF

NIST SP 800-53

ServiceNow GRC

Microsoft Copilot

Job description

Finteksoft Inc is seeking a Technology & Cybersecurity Risk Management Analyst to help strengthen technology risk and cybersecurity governance initiatives. This onsite role in Plano, TX focuses on assessing cybersecurity risk, evaluating security controls, and translating findings into clear reporting and remediation tracking.

Role Summary

The analyst will support cybersecurity risk assessment activities by conducting evaluations of security controls, mapping risks to frameworks and control requirements, and reporting risk status and remediation progress. Work will include maintaining governance records and continuously improving technology risk management processes.

Key Responsibilities

• Conduct technology and cybersecurity risk assessments, including risk intake and risk evaluation.
• Use NIST, COBIT, and ISO 27001 to assess security risks and define control requirements.
• Identify and document inherent risks, residual risks, emerging threats, and control gaps.
• Evaluate security control design and operating effectiveness.
• Map identified risks to applicable security controls, policies, and compliance frameworks.
• Run control walkthroughs and collaborate with control owners and business stakeholders.
• Develop risk mitigation recommendations and monitor remediation activities through closure.
• Maintain risk registers, assessment documentation, control evidence, and governance records.
• Prepare risk reports, dashboards, and presentations for management and leadership.
• Support continuous improvement of technology risk management processes and procedures.

Requirements

• 7 years of experience in Technology Risk, Cybersecurity Risk Management, IT Risk, GRC, IT Audit, or Information Security.
• Hands-on knowledge working with NIST, COBIT, and ISO 27001 frameworks.
• Practical understanding of cybersecurity risk assessments, security controls, and risk mitigation.
• Experience identifying control gaps and evaluating control effectiveness.
• Understanding of risk management concepts including inherent risk, residual risk, and remediation tracking.
• Experience interacting with control owners, stakeholders, and cross-functional teams.
• Strong documentation, analytical, communication, and problem-solving skills.
• Proficiency in Microsoft Excel, Microsoft Word, and Microsoft PowerPoint.
• Familiarity with ServiceNow GRC or other GRC tools is preferred.
• Exposure to Microsoft Copilot is an added advantage.
• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field, or equivalent practical experience.

Tools and Technologies

• NIST
• COBIT
• ISO 27001
• NIST CSF
• NIST SP 800-53
• Microsoft Excel
• Microsoft Word
• Microsoft PowerPoint
• ServiceNow GRC
• Microsoft Copilot

Compensation and Work Location

• Location: Plano, TX (onsite)
• Pay: USD 45 - 55 per hour

Benefits

• Dental insurance

Application Questions

• Do you have hands‑on experience using Microsoft Excel for risk tracking, risk registers, assessment documentation, reporting, Pivot Tables, VLOOKUP/XLOOKUP, or dashboards?
• Do you have practical experience using NIST frameworks (NIST CSF or NIST SP 800-53) for cybersecurity risk assessments, security control reviews, or gap assessments?
• Do you have hands‑on experience working with COBIT and ISO 27001 frameworks for IT governance, risk assessments, control mapping, or compliance audits?