Lead Cyber Risk Management Analyst, Technology and Digital, FT, 8:30A - 5P
About The Position
The Lead Cyber Risk Management Analyst is an integral part of the Information Security team and helps improve the maturity level of technology risk practices across the enterprise, as the organization continues to grow at a rapid pace. The Analyst is responsible for adhering with regulatory guidance for identifying, managing, and reporting on risks impacting the organization‘s strategy and operations, consistent with a commitment to maintain a high standard of compliance with all applicable laws and regulations, as well as overall sound risk management. Works collaboratively with various stakeholders and levels across the organization to execute a risk-based methodology for identifying, measuring, and managing the various types of third-party and information risk to the organization. The Lead Cyber Risk Management Analyst is responsible for providing guidance to business decision-makers on issues and development of risk mitigation strategies. May develop or assist with evaluating policies, processes and standards to reduce risk, and ensure information confidentiality, integrity and availability.
Requirements
- Bachelor's degree in Computer Science, Cyber Security or related field or 11 years of related work experience.
- Minimum 10 years of experience in an information security risk management role.
- Solid understanding and demonstrated experience working with information security legal/regulatory requirements such as HIPAA, FIPA, & PCI-DSS.
- Advanced knowledge and several years of experience working with frameworks such as NIST, ISO, COBIT, or HITRUST.
- Advanced level of technical knowledge in the areas of network, operating system, database, identity management, Internet/web, cloud & endpoint security.
- Experience with industry standard enterprise risk assessment & management solutions.
- Ability to partner/influence others to build consensus utilizing strong analytical skills & demonstrated aptitude for identifying/interpreting enterprise risks & mitigating controls including evolving risks, threats, vulnerabilities, impact, & emerging technologies.
- Excellent written, oral & presentation skills & an ability to synthesize information to assist in making clear, concise recommendations on courses of action or mitigation.
- Ability to effectively prioritize & maintain focus on multiple tasks while working in an agile environment with diverse stakeholders.
- Ability to work both independently and as part of a team.
Nice To Haves
- Certifications such as CISSP, CRISC, CISM, CISA, CSX-P, CAP are desirable.
Responsibilities
- Adhering with regulatory guidance for identifying, managing, and reporting on risks impacting the organization‘s strategy and operations.
- Maintaining a high standard of compliance with all applicable laws and regulations, as well as overall sound risk management.
- Working collaboratively with various stakeholders and levels across the organization to execute a risk-based methodology for identifying, measuring, and managing the various types of third-party and information risk to the organization.
- Providing guidance to business decision-makers on issues and development of risk mitigation strategies.
- Developing or assisting with evaluating policies, processes and standards to reduce risk, and ensure information confidentiality, integrity and availability.
Benefits
- Career growth and development opportunities, with clear pathways and ongoing support
- Comprehensive health and wellness resources that go beyond traditional benefits
- A wellness program that can help employees eliminate their medical plan deductible, reducing out-of-pocket healthcare costs
- Tuition reimbursement to support continued learning and advancement
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
