Technology & Cybersecurity Risk Management Analyst

Iflow Energy Solutions Inc.; Plano (TX); On-site; USD 110,000 - 160,000; Full time

Job summary

Iflow Energy Solutions Inc. in Plano, TX is seeking a Technology & Cybersecurity Risk Management Analyst to analyze risks, conduct assessments, and guide risk-based decisions within the Cybersecurity Division.

The role requires strong knowledge of NIST, COBIT, ISO frameworks, and experience in risk reporting. You will collaborate with cross-functional teams and document risk evidence using governance tools and common Office productivity software.

Qualifications

• Bachelor's degree in information technology, cybersecurity, computer science, business, or related field (or equivalent).
• 1–3 years of experience in cybersecurity or technology risk management, IT risk, cybersecurity, compliance, or related discipline.
• Foundational understanding of cybersecurity principles and risk frameworks (NIST/COBIT/ISO).

Responsibilities

• Conduct risk intake, assessments, triage sessions, and stakeholder risk discussions.
• Assess technology and cybersecurity risks using NIST, COBIT, and ISO frameworks.
• Identify, document, and evaluate inherent, residual, and emerging technology risks.
• Review controls and evaluate their effectiveness in mitigating risks.
• Map risks to controls and framework/policy requirements.
• Facilitate control walkthroughs and risk discussions with owners.
• Document risk statements, controls, evidence, and assessment results.
• Develop risk treatment recommendations and track remediation through closure.
• Escalate overdue actions and significant control/compliance concerns.
• Prepare executive-ready risk reports and governance materials.

Skills

Technology & Cybersecurity knowledge

Risk assessment & analysis

Project management

Process improvement

Stakeholder collaboration

Communication

Attention to detail

Risk documentation

Education

Bachelor's degree in IT/Cybersecurity/CS/Business

Tools

Microsoft Word

Microsoft Excel

Microsoft PowerPoint

ServiceNow

CoPilot

Job description

Job Title

Technology & Cybersecurity Risk Management Analyst

Location

CYBERSECURITY DIVISION Plano, Texas, United States

Duration

Long-term

Experience

10 Years Above

Description

The Technology & Cybersecurity Risk Management (T&CRM) Engineer supports the T&CRM program by analyzing technology and cybersecurity risks, conducting risk assessments, leading risk-related initiatives, and enhancing risk management processes. This role helps identify, visualize, and reduce technology and cybersecurity risks while guiding stakeholders through risk-based decision-making.

Core Responsibilities

• Conduct risk intake, assessments, triage sessions, and stakeholder risk discussions.
• Assess technology and cybersecurity risks using NIST, COBIT, and ISO frameworks.
• Identify, document, and evaluate inherent, residual, and emerging technology risks.
• Review controls and evaluate their effectiveness in mitigating identified risks.
• Map risks to controls and applicable framework and policy requirements.
• Facilitate control walkthroughs and risk discussions with control owners and stakeholders.
• Document risk statements, controls, evidence, and assessment results in governance tools and Word/Excel/PPT.
• Develop risk treatment recommendations and track remediation activities through closure.
• Escalate overdue actions, unresolved risks, and significant control or compliance concerns.
• Prepare executive-ready risk reports, dashboards, and governance presentation materials.

Required Knowledge And Skills

• Technology and Cybersecurity Fundamentals: Demonstrates a solid understanding of security controls, threats, and risk concepts. NIST, COBIT, and ISO 27001 framework knowledge.
• Risk Assessment & Analysis: Ability to identify, assess, and document technology and cybersecurity risks and control gaps. Understanding of control design, control effectiveness, and risk mitigation concepts.
• Project Management: Effectively plans, tracks, and executes work across multiple concurrent initiatives.
• Process Improvement: Identifies opportunities to streamline workflows and improve operational efficiency.
• Stakeholder Collaboration: Works effectively with cross functional teams and external partners.
• Communication: Clearly communicates technical risk information to both technical and non technical audiences.
• Attention to Detail: Produces accurate, well documented assessments and maintains reliable risk records.
• Tool proficiency: Microsoft Word, Excel, PowerPoint, and CoPilot. ServiceNow.

Requirements

• Bachelor s degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field (or equivalent experience).
• 1 3 years of experience in cybersecurity or technology risk management, IT risk, cybersecurity, compliance, or related discipline.
• Foundational understanding of cybersecurity principles, risk assessment methodologies, and common security control frameworks.
• Experience supporting projects or initiatives that require coordination across multiple stakeholders.
• Strong written and verbal communication skills, with the ability to clearly document risks and recommendations.

Key Success Factors

• Comfortable navigating conversations with Control Owners and stakeholders.
• Clear and structured articulation of technology risks and controls.
• Strong attention to detail and documentation quality.
• Willingness to learn and grow within a Technology & Cybersecurity Risk Management function.
• Collaborative mindset across technical and non-technical teams.