Cyber Security Risk Analyst

Job Summary

We are seeking a proactive and detail-oriented Cyber Risk Management Analyst to support the organization's cybersecurity, identity and access management (IAM), and risk governance initiatives. The role involves managing user access controls, conducting access reviews and certifications, supporting security risk assessments, remediating audit and penetration testing findings, and ensuring compliance with security policies and industry standards. The ideal candidate will work closely with business, technology, and security teams to strengthen cybersecurity controls, mitigate risks, and enhance the overall security posture of the organization.

Responsibilities

• Perform operational activities for the Identity and Access Management program.

• Perform access certifications and reviews of access to confirm observance of Separation of Duties and the principle of least privilege. • Remediate penetration test and audit findings.

• Promote cross-team communication and maintain technical and departmental process documentation.

• Facilitate resolution of access management requests and incidents. • Provide insights into potential modifications to role-based access as necessary.

• Support security risk assessments and compliance reviews. • Collaborate with security and business teams on access governance initiatives.

Qualifications

• Knowledge of information security best practices and risk management disciplines.

• Understanding of the external threat landscape and adversary tactics and techniques.

• Knowledge of security and control frameworks (COBIT, COSO, ITIL, FFIEC, NIST).

• Knowledge of IAM technologies and identity governance solutions. • Strong analytical skills and ability to document findings and recommendations.

• Ability to build relationships with stakeholders and communicate technical concepts.