Cyber Risk Analyst
Core
Drive cyber security audits, vendor security reviews, business continuity drills, and security awareness initiatives while supporting NIST CSF and ISO 27001 implementation.
Role type
Cyber Risk Analyst (GRC)
Builds
Security policies, risk registers, audit reports, and BCP/DR plans
Domain
Cybersecurity, Governance, Risk, and Compliance
Deliverable
dashboards & analysis
Required skills
Cyber security audits, vendor risk assessment, business continuity planning, risk register management, security policy development, regulatory compliance (NIST/ISO)
Preferred skills
CISA, ISO 27001 Lead Implementer/Auditor, AI governance credentials (ISO/IEC 42001, NIST AI RMF)
Technologies
NIST Cybersecurity Framework, ISO 27001
Responsibilities
Plan and execute internal cyber security audits and control reviews; Conduct security due diligence for vendors and third parties; Plan, coordinate, and document tabletop exercises and technical BCP/DR drills; Maintain up-to-date security policies and standards; Prepare regular reports and dashboards on risk status and compliance progress
Seniority
Mid-level, hands-on IC