Security Risk Analyst
Core
Identify, analyze, and manage security risks across the organization to support business decision-making and align with governance frameworks.
Role type
Security Risk Analyst (GRC)
Builds
Risk assessments, mitigation strategies, and governance documentation
Domain
Cybersecurity / Risk Management / Compliance
Required skills
Risk assessment, risk lifecycle management, audit response, regulatory compliance knowledge, security frameworks knowledge, metrics definition, process design, critical thinking
Preferred skills
Security certifications (CISSP, CISA), ITIL/ITSM knowledge
Technologies
ISO, NIST, GRC platforms
Responsibilities
Conduct enterprise-wide continuous risk assessments, manage the risk lifecycle, support internal/external audits, identify and assess privacy/security/regulatory risks, recommend security improvements, participate in third-party vendor risk assessments, analyze risk findings and report gaps, define and track security metrics, maintain governance documentation, collaborate on strategic planning, respond to security inquiries, design security processes.
Seniority
Mid-level, hands-on IC
