Cyber Risk Senior Analyst

Candidates should have 4-6+ years of experience in cybersecurity, cyber risk analysis, or technical control implementation. Practical experience implementing or operating security controls across areas such as endpoint security, vulnerability management, identity and access management, cloud security, or network security is required. A solid understanding of risk management principles, including risk likelihood and impact analysis, is necessary. Familiarity with cyber risk frameworks such as NIST RMF, ISO 27005, or Open FAIR is expected, with hands-on experience being a plus. The ability to translate technical security issues into risk language understandable by business stakeholders is important. Experience working with GRC platforms or risk tracking tools is also a requirement. A Bachelor's degree or equivalent experience in Cybersecurity, Information Technology, Risk Management, or a related field is needed.