Senior Analyst, Cyber Risk Quantification and GRC

About This Role

Forrester is currently looking for a Senior Analyst to conduct research and deliver strategic advice for risk management leaders and their teams.

• A strong understanding of risk management roles, responsibilities, and the key security and risk trends and their business and technology implications.
• Deep knowledge and experience with risk management practices, methods, and cyber risk quantification.
• Experience in developing, maintaining, and communicating risk management artifacts such as risk standards, procedures, appetite, registry, and business strategy.
• Strong expertise in compliance management, internal or external audit, and GRC platforms is highly desired.

• Develop a deep understanding of what Forrester clients require to be successful as risk management leaders and professionals, focusing on how they help organizations build resilient, opportunity‑seeking businesses.
• Conduct primary research into risk management capabilities, practices, touchpoints, and artifacts to support C‑suite executives, business leaders, and relevant committees.
• Help define the future of risk management, describing how risk leaders and professionals can collaborate with other key business functions to support organizational success.
• Work with different focus areas across Forrester research teams to develop a comprehensive research portfolio on risk management, incorporating expertise from across Forrester for a “big‑picture” view.
• Partner with other Forrester analysts on broader risk topics, including risk quantification, third‑party risk, systemic risk, compliance, and cyber risk.
• Research, write, and create approximately six to eight research projects per year, including written reports, tools, webinars, videos, podcasts, infographics, and other intellectual property.
• Build visibility for research and contribute to Forrester client communities.
• Consult with clients to apply research in the context of their business environment and help solve their problems through inquiry, guidance, and advisory engagements.
• Establish an industry presence as an influential speaker and thinker; build relationships with journalists who cover the sector; and participate in vendor briefings and field press inquiries as needed.

• Five to seven years of experience as a research analyst, consultant, or practitioner focused on risk management, with a focus on cyber risk quantification, or an equal amount of time as product manager for vendors that serve the market.
• Deep intellectual curiosity about the effect of technology on the business landscape, solid business instincts, and a practical understanding of what drives companies.
• Creative view of markets, technologies, and attitudes combined with a fascination with the future.
• Superior listening, critical thinking, and writing skills, as well as compelling presentation skills.
• The ability to take complex, disparate ideas and distill them into simple, provocative concepts, and to take a stand on vendors and outcomes.
• Ability to travel up to 20% of the time.

Base salary range: $119,000 – $193,000 (U.S. exclusions: New York City – $136,000 – $222,000; Georgia – $106,000 – $174,000). Bonus target at Washington State: 10% of base salary (subject to performance and eligibility).

July
31,2026

FLSA Status:
Exempt. Forrester Research, Inc. is an Equal Employment Opportunity Employer. As a federal contractor, Forrester encourages veterans and individuals with disabilities to apply for employment. If you would like to discuss a reasonable accommodation, please reach out to accom