Senior Cybersecurity Risk & Compliance Analyst

Position Summary

We are seeking an experienced cybersecurity professional to help identify, assess, and manage information security risks across the organization. This individual will work closely with IT teams, business leaders, security professionals, and third-party vendors to strengthen cybersecurity practices, maintain compliance, and support risk mitigation efforts.

The ideal candidate has a strong background in IT risk management, security assessments, regulatory compliance, and cybersecurity frameworks. This role requires someone who can understand technical security concerns and communicate their business impact to leadership.

Key Responsibilities

Cybersecurity Risk Management

• Conduct comprehensive cybersecurity risk assessments and develop mitigation strategies.

• Identify security gaps across applications, infrastructure, cloud environments, and business systems.

• Provide recommendations to reduce cybersecurity exposure and improve security controls.

• Support security reviews for new applications, technologies, and system enhancements.

Security Governance & Compliance

• Interpret and apply cybersecurity standards, including NIST, CIS, OWASP, and PCI DSS.

• Support internal security assessments, corporate audits, and remediation activities.

• Ensure security requirements are incorporated into business processes and technology initiatives.

• Monitor compliance with internal security policies and industry regulations.

Business & Technology Collaboration

• Partner with business executives, IT leadership, and technology teams to address cybersecurity risks.

• Communicate security findings, recommendations, and outstanding risks to leadership.

• Serve as a cybersecurity subject matter expert for assigned business units.

• Participate in architectural reviews to identify security concerns before implementation.

Third-Party & Vendor Risk Management

• Assess cybersecurity risks associated with third-party vendors and service providers.

• Support supplier risk assessments and remediation efforts.

• Assist with security-related contract reviews and vendor compliance requirements.

Vulnerability Management & Incident Response

• Support threat and vulnerability management across applications, networks, and cloud environments.

• Review vulnerability findings and work with technical teams to prioritize remediation.

• Support cybersecurity incident response activities alongside the internal CSIRT.

• Develop risk reports to help leadership understand vulnerabilities and remediation progress.

Required Qualifications

• 8+ years of overall professional experience, with at least 6 years in IT and 5 years in cybersecurity or IT risk management.

• Bachelor's degree in Computer Science, Information Systems, Engineering, or a related field.

• Strong experience conducting cybersecurity risk assessments and developing mitigation plans.

• Experience with IT risk management, information security governance, and compliance.

• Working knowledge of NIST Cybersecurity Framework, CIS, OWASP, and PCI DSS.

• Understanding of network security, operating systems, applications, and security controls.

• Experience evaluating security risks involving:

  • Azure cloud environments

  • SaaS platforms, including Salesforce

  • Web applications and eCommerce systems

  • Mobile applications

  • Agile and DevSecOps development environments

• Experience supporting third-party risk assessments and vulnerability management.

• Ability to communicate technical cybersecurity risks to business executives and IT leadership.

• Strong written communication, analytical, and problem-solving skills.

Desired Certifications

• CISSP – Certified Information Systems Security Professional

• CISM – Certified Information Security Manager

• CRISC – Certified in Risk and Information Systems Control

• Comparable cybersecurity or risk management certification