Responsibilities

The Cybersecurity Risk Analyst will identify, analyze, and evaluate cybersecurity risks related to the organization’s IT infrastructure, applications, and third-party vendors, developing and implementing cybersecurity risk management frameworks, policies, and procedures. They will conduct regular security risk assessments, audits, and penetration testing, maintain and update risk registers, ensure compliance with industry regulations and frameworks such as NIST, ISO 27001, GDPR, CMMC, HIPAA, or SOC 2, and conduct internal security audits. The role also involves leading response efforts for security incidents, developing and refining cybersecurity incident response plans, collaborating with IT and security teams to resolve vulnerabilities, providing governance support for cybersecurity policies, educating employees on security best practices, and serving as a liaison with external cybersecurity auditors and regulatory agencies.