Technology Risk Analyst | Cyber Risk Consultant

Employment Type: Full-Time

Level: Mid-Level to Senior

We are seeking a detail-oriented and analytical Technology Risk Analyst | Cyber Risk Consultant to identify, assess, monitor, and manage technology and cybersecurity risks across the organization. This role will work closely with IT, Cybersecurity, Compliance, Internal Audit, and business teams to strengthen technology-risk management, improve security controls, and support a resilient and secure operating environment.

• Identify and assess technology, cybersecurity, information-security, and operational risks across the organization.
• Conduct technology risk assessments covering infrastructure, applications, cloud environments, networks, and business systems.
• Evaluate cybersecurity threats, vulnerabilities, control weaknesses, and potential business impacts.
• Develop and maintain technology and cyber risk registers, risk assessments, and risk treatment plans.
• Monitor key risk indicators (KRIs), key performance indicators (KPIs), and emerging technology-risk trends.
• Assess the effectiveness of existing IT security controls, policies, procedures, and risk-management frameworks.
• Identify control gaps and recommend appropriate remediation and mitigation actions.
• Work with technology teams to track and resolve identified risks, findings, and control deficiencies.
• Support enterprise risk assessments and integrate technology risks into broader organizational risk-management processes.
• Conduct cybersecurity risk assessments for third-party vendors, service providers, and technology partners.
• Evaluate risks associated with cloud computing, SaaS platforms, APIs, data systems, and emerging technologies.
• Support risk assessments related to system implementations, technology changes, and digital transformation projects.
• Analyze cybersecurity incidents and contribute to post-incident risk assessments and remediation activities.
• Monitor emerging cyber threats, vulnerabilities, regulatory developments, and technology-risk trends.
• Develop risk scenarios and assess their potential financial, operational, regulatory, and reputational impacts.
• Support business continuity, disaster recovery, and technology resilience assessments.
• Review access controls, identity management, data protection, vulnerability management, and security monitoring practices.
• Assist with internal and external audits by preparing risk documentation, evidence, and management responses.
• Support compliance assessments against applicable technology and cybersecurity standards and requirements.
• Prepare risk reports, dashboards, assessment summaries, and management presentations.
• Communicate technology and cybersecurity risks clearly to both technical and non-technical stakeholders.
• Facilitate risk workshops, control assessments, stakeholder interviews, and remediation discussions.
• Provide practical recommendations to strengthen technology governance, security controls, and risk-management practices.
• Track remediation plans and elevate overdue or high-priority risk issues where appropriate.
• Maintain accurate documentation of risk assessments, controls, findings, action plans, and risk acceptance decisions.
• Support the development and continuous improvement of technology-risk policies, standards, procedures, and methodologies.
• Evaluate the risk implications of new technologies, applications, platforms, and technology initiatives.
• Conduct periodic reviews of risk profiles to identify changes in threat exposure and control effectiveness.
• Support senior management with data-driven insights for technology-risk and cybersecurity decision-making.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science,…