Sr Risk Analyst

Informa Group Plc. • Newton, MA

13h • $150,000 - $170,000 • Hybrid

About The Position

Informa TechTarget is seeking an experienced, strategic Senior Cyber Risk Analyst to manage cybersecurity risk across the organization. Based in the Newton, Massachusetts office, the role leads enterprise risk assessments, identifies and evaluates cyber threats and vulnerabilities, develops risk treatment plans, and partners with engineering, security, IT, and product teams on risk mitigation and technology initiatives. The analyst assesses cloud and hybrid infrastructure, vulnerability and threat management, third-party and vendor risk, cybersecurity governance and compliance, and emerging technology risks, including AI/ML security and privacy. The position also supports AI governance and responsible AI practices.

The role prepares executive- and board-level reporting, maintains cyber risk dashboards and indicators, and translates technical risk into business terms to inform strategic decisions. It collaborates with legal, compliance, privacy, internal audit, and other cross-functional teams. The position is based in Newton, MA, with in-person work three or more days per week and flexibility to work from home or remotely at other times.

Requirements

• Bachelor's degree in Cybersecurity, Information Security, Risk Management, Computer Science, Information Technology, or a related field.
• 5–8 years of progressive experience in cybersecurity risk management, information security, or IT risk.
• Proven experience conducting enterprise-level cyber risk assessments in complex technology environments.
• Experience assessing cloud security risks and working with AWS, Azure, or GCP.
• Demonstrated experience in third-party risk management and vendor security assessments.
• At least one required certification: CRISC, CISSP, or CISM.
• Deep understanding of cybersecurity principles, threats, vulnerabilities, and attack vectors.
• Knowledge of risk management frameworks including NIST, ISO 27001, SOC 2, and SOX.
• Experience with vulnerability management tools and processes and GRC platforms.
• Understanding of cloud security architecture and controls, security controls, defense-in-depth strategies, and compensating controls.
• Familiarity with compliance frameworks such as SOC 2, ISO 27001, and NIST 800-53.
• Understanding of network, application, and infrastructure security.
• Strong analytical and critical-thinking skills, attention to detail, and written and verbal communication skills for executive audiences.
• Ability to translate technical cybersecurity concepts into business risk language.
• Strong stakeholder management and influence skills across organizational levels.
• Proficiency in data analysis and visualization tools.
• Project management capabilities and ability to manage multiple priorities.

Nice To Haves

• CISA, CGRC, CCSP, or other relevant cybersecurity or risk management certifications.
• Master's degree in Cybersecurity, Information Security, Risk Management, or a related field.
• Background in information security operations or security engineering.
• Knowledge of security architecture and secure design principles.
• Experience with security incident response and business continuity planning.
• Familiarity with AI/ML security risks and emerging technology governance.
• Understanding of privacy regulations such as GDPR, CCPA, and PIPEDA.

Responsibilities

• Lead enterprise-wide cyber risk assessments across business operations, systems, and infrastructure.
• Identify, analyze, and evaluate cybersecurity threats, vulnerabilities, and potential business impacts.
• Maintain enterprise risk registers and develop risk treatment plans and mitigation strategies.
• Assess risks for new technologies, systems, business initiatives, cloud environments, and hybrid infrastructure.
• Review cloud architecture and configurations, and partner with cloud engineering on security controls and risk mitigation.
• Oversee vulnerability management effectiveness, analyze scan and penetration test findings, and coordinate timely remediation of critical vulnerabilities.
• Monitor threat intelligence and evaluate the effectiveness of security controls.
• Conduct third-party cybersecurity risk assessments, review vendor questionnaires and audit materials, assess vendor access risks, and support ongoing monitoring and remediation.
• Support compliance with cybersecurity regulations, standards, and frameworks; maintain policies and procedures; and participate in audits and governance activities.
• Prepare cyber risk reports and presentations for executive leadership, the board, and stakeholders; maintain dashboards with KRIs and KPIs; and communicate risk trends and recommendations.
• Advise engineering, IT, security, product, and business teams on cybersecurity risks during project planning, system design, and technology implementation.
• Assess AI/ML and emerging technology cybersecurity and privacy risks, and support AI governance and responsible AI practices.
• Stay current with emerging technology risks and regulatory requirements.

Benefits

• Up to four days per year to volunteer with a philanthropic organization.
• Training and learning opportunities, mentoring platforms, access to LinkedIn Learning courses, and support for internal job moves.
• Open Vacation, 10 national holidays, and the option to work from almost anywhere for up to four weeks per year.
• 401(k) match.
• Health, vision, and dental insurance.
• Parental leave.
• Employee stock purchase plan offering company shares at a minimum 15% discount.
• Employee assistance program, mental health first aiders, and free access to a wellness app.
• Global awards and kudos programs.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior