Cyber Risk Analyst

McLane•Austin, TX

2d•Hybrid

About The Position

Are you passionate about strengthening cybersecurity through people, process, and culture? We’re looking for a Risk Analyst, Cybersecurity to play a pivotal role in reducing human‑related cyber risk and advancing a security‑first mindset across the organization. In this role, you’ll lead cybersecurity awareness initiatives, design impactful phishing simulations, and partner across the business to support governance, risk, and compliance (GRC) efforts aligned with industry frameworks such as NIST and ISO. This is an opportunity to influence behavior at scale, translate complex cyber risks into actionable insights, and help protect the organization through education, policy, and collaboration.

Requirements

Bachelor’s degree in cybersecurity, computer science, information technology, or a related field
Experience or strong interest in cybersecurity human risk management.
Demonstrated ability to lead cross‑functional initiatives and manage complex projects.
Strong background in policy lifecycle management and governance frameworks.
Excellent analytical, problem‑solving, and communication skills.
Ability to influence and collaborate with stakeholders at all levels of the organization.
Comfort translating complex technical topics into clear, actionable guidance.
Ability to read, write, and understand English at a level sufficient to perform job-related tasks effectively and safely. This includes understanding work instructions, safety protocols, and communications essential to the role.

Nice To Haves

Relevant certifications (Security+, GSEC, SSAP, or similar) are a plus.

Responsibilities

Lead and continuously improve the company’s cybersecurity awareness training program to reduce human risk.
Design, execute, and analyze phishing simulation campaigns, using results to drive targeted follow‑up training.
Track training completion, phishing performance, and human risk metrics through dashboards and reports.
Present insights, trends, and recommendations to leadership and key stakeholders.
Partner with business, IT, and security teams to support governance, risk, and compliance initiatives.
Author, maintain, and enhance cybersecurity policies, standards, and procedures aligned with NIST CSF and ISO 27001/27002.
Serve as a trusted advisor, clearly communicating cybersecurity concepts to both technical and non‑technical audiences.
Evaluate and implement new training tools or platforms as needed to strengthen program effectiveness.