Technical Risk Analyst

Stifel•Saint Louis, MO

20h•Onsite

About The Position

A Technical Risk Management Analyst is responsible for identifying, assessing, and mitigating risks associated with technology and technical processes within an organization. This role typically involves analyzing potential risks, implementing strategies to minimize their impact, and ensuring compliance with relevant regulations and standards. The Technical Risk Management Analyst will safeguard the organization's technological assets and ensure that technology-related risks are effectively managed. The successful candidate thinks strategically, is intellectually curious, and is comfortable working in undefined problem spaces. The Technical Risk Management Analyst will be expected to refine the risk program further.

Requirements

Strong understanding of information security principles, risk management frameworks, and relevant technologies (e.g., firewalls, intrusion detection systems, cloud security).
Excellent analytical and problem-solving skills with the ability to assess complex technical risks and develop effective solutions.
Strong verbal and written communication skills, with the ability to convey complex information clearly to diverse audiences
Familiarity with federal and state legal/regulatory requirements related to information security.
Understand the basic tenets of security risk management (threat management, vulnerability management, and risk treatment).
Bachelor's degree in Cybersecurity, Information Security, Information Assurance, IT Audit, Computer Science, Management Information Systems, or related discipline, or equivalent work experience
3+ years of experience in risk management, information security, IT Audit, or a related field.

Nice To Haves

Security or IT-related professional certification (CISSP, CISA, CISM, etc.)
Experience with Governance, Risk, and Compliance tools.
Solid understanding of information security tools and best practices.
Proficient with Windows 365.

Responsibilities

Identify and evaluate technical risks associated with information systems, processes, and technologies.
Conduct risk assessments to determine the likelihood and potential impact of identified risks.
Analyze risk data using qualitative and quantitative methods.
Develop and implement risk mitigation strategies, including policies, procedures, and controls to reduce risk exposure.
Ensure compliance with relevant regulations, standards, and best practices related to information security and risk management (GLBA, NIST, CIS, etc.)
Prepare and present risk assessment reports to senior management, highlighting key risks, trends, and recommendations for improvement.
Work closely with IT, cybersecurity, and other departments to promote a risk-aware culture and facilitate effective risk management practices.
Monitor and review risk management processes and systems to identify areas for improvement and ensure they remain effective in a changing technological landscape.
Provide training and awareness programs for staff to ensure understanding of risk management practices and their roles in mitigating risks.