Sr Analyst, Risk Management

Newell Brands•Atlanta, GA

About The Position

The Information Security Risk Management Senior Analyst is an intermediate-level professional within the Global Information Security Risk & Resilience team at Newell Brands. Reporting to the Information Security (IS) Risk Management Manager, this role is responsible for identifying, assessing, quantifying, and communicating cyber risk across a diverse global technology landscape. The IS Risk Management Manager retains program accountability; the Senior Associate operates with routine oversight and exercises independent judgment and discretion on moderately complex assignments. This role partners with business and technology leaders to evaluate cybersecurity risks across enterprise applications, cloud platforms, infrastructure, manufacturing environments, digital transformation initiatives, and emerging technologies, including Artificial Intelligence (AI). The Senior Associate conducts qualitative and quantitative cyber risk assessments, develops executive-ready risk recommendations, and supports strategic initiatives including the enterprise Crown Jewels program. Success requires strong analytical capability, excellent stakeholder engagement skills, and the ability to translate complex technical risks into meaningful business impact. The Senior Associate also serves as a mentor to junior team members. The role focuses primarily on assessments and Cyber Risk Quantification (45%), strategic risk initiatives (20%), business partnership and executive risk advisory (20%), and program maturity and process improvement (15%). The actual task percentages can change based on business needs.

Requirements

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Business, or a related discipline.
2 to 4 years of experience in cybersecurity, risk management, Governance, Risk, and Compliance (GRC), or consulting.
Demonstrated experience using AI tools, including major large language models (LLMs) such as ChatGPT, Microsoft Copilot, and Claude, to produce high-quality work outputs, increase efficiency, and drive process improvements.
Solid understanding of primary control frameworks, including the Center for Internet Security (CIS) Critical Security Controls (CSC) Top 18 and the National Institute of Standards and Technology Cybersecurity Framework (NIST CSF) 2.0, with awareness of the NIST AI Risk Management Framework (AI RMF).
Strong analytical and critical-thinking skills.
Excellent written, verbal, and presentation skills, with the ability to communicate technical concepts to non-technical audiences.
Experience managing multiple priorities in a fast-paced global environment.

Nice To Haves

Professional certification such as Certified in Risk and Information Systems Control (CRISC), CompTIA Security+, or equivalent is a plus.
Experience performing FAIR-based CRQ is a strong plus.
Experience with Optro (formerly AuditBoard), Archer, or ServiceNow GRC is a plus.
Exposure to AI security risk assessments is a plus.

Responsibilities

Conduct qualitative and Factor Analysis of Information Risk (FAIR)-based Cyber Risk Quantification (CRQ) assessments across enterprise applications, cloud environments, infrastructure, manufacturing technologies, and strategic initiatives.
Facilitate structured risk workshops with business and technical stakeholders to identify, analyze, and quantify cyber risk scenarios.
Develop defensible estimates of financial exposure using FAIR methodology and supporting data.
Document risk treatment recommendations aligned to business objectives.
Monitor remediation activities and evaluate residual risk.
Conduct risk assessments supporting the enterprise Crown Jewels initiative.
Perform security risk assessments for strategic business initiatives, mergers and acquisitions, AI implementations, and major technology programs.
Assess emerging technology risks, including AI adoption, from an Information Security perspective.
Identify cyber risk trends and recommend improvements.
Serve as a risk advisor for assigned business and technology initiatives.
Present assessment findings and recommendations to managers, directors, and senior leaders.
Build collaborative relationships across Information Security, IT enterprise architecture, and business teams.
Translate technical cybersecurity risks into business-focused language that supports informed decision-making.
Mentor junior analysts and provide guidance on assessment execution and stakeholder engagement.
Support the development of security risk assessment standards and, from an Information Security perspective, AI risk assessment practices.
Identify opportunities to use automation and AI-enabled capabilities to improve program efficiency and effectiveness.
Promote continuous improvement through documentation, knowledge sharing, and process improvement.