Cybersecurity Analyst - Risk and Controls

The ER&R Risk Analyst is pivotal role in identifying, analyzing and reporting enterprise Cybersecurity risks for business, cyber and IT leadership through the execution of IT Risk Assessments. This position will conduct quantitative and qualitative factor analysis to support the prioritization of tactical and strategic risk mitigation projects and measure the progress of cybersecurity risk reduction initiatives. The position will also create presentations, briefings and communications on cybersecurity risk issues and risk posture for a variety of internal and external stakeholders by maintaining the risk registry, risk taxonomy and other reports.

Other aspects of communications this role will be responsible for include but not limited to preparing, directing, reviewing and/or writing cybersecurity policy and standards that align with our Cybersecurity Framework and business objectives. The position is responsible for adhering to the risk management framework as well to address cybersecurity risks of Sherwin-Williams information assets. This role will also help prepare and present comprehensive metrics on cyber risk posture for the Risk and Controls team and the maturity/effectiveness of the department as a whole.

You will be expected to work with the various ER&R teams and at times, directly with the business owners to identify potential vulnerabilities, develop strategies to address and ensure the integrity and security of our business processes and applications that process sensitive information are protected.

The ER&R Risk Analyst is pivotal role in identifying, analyzing and reporting enterprise Cybersecurity risks for business, cyber and IT leadership through the execution of IT Risk Assessments. This position will conduct quantitative and qualitative factor analysis to support the prioritization of tactical and strategic risk mitigation projects and measure the progress of cybersecurity risk reduction initiatives. The position will also create presentations, briefings and communications on cybersecurity risk issues and risk posture for a variety of internal and external stakeholders by maintaining the risk registry, risk taxonomy and other reports.

Other aspects of communications this role will be responsible for include but not limited to preparing, directing, reviewing and/or writing cybersecurity policy and standards that align with our Cybersecurity Framework and business objectives. The position is responsible for adhering to the risk management framework as well to address cybersecurity risks of Sherwin-Williams information assets. This role will also help prepare and present comprehensive metrics on cyber risk posture for the Risk and Controls team and the maturity/effectiveness of the department as a whole.

You will be expected to work with the various ER&R teams and at times, directly with the business owners to identify potential vulnerabilities, develop strategies to address and ensure the integrity and security of our business processes and applications that process sensitive information are protected.

• Interfaces with ER&R and Enterprise Technology departments to identify and contain internal and external risks.
• Obtain a thorough understanding of our business processes, applications, standard programs, and reports as they related to privacy and data security.
• Lead the analysis complex business processes or issues and quickly understand the business issues and related privacy and data challenges.
• Perform risk assessments of new/existing technologies, data processing, policy exceptions and non-compliant 3rd Party Vendors.
• Identify process improvement opportunities; define improvement requirements; conduct detailed analysis; act as a liaison…