Cyber Risk Management Analyst

Position Details
Cyber Risk Management Analyst
Mid to Senior Level
Remote
Immediate Joiner
Location Preference:  India
Work Hours / Time Zone:  EST (full overlap required)

Role Overview
The Cyber Risk Management Analyst will support risk assessments across business applications and services following an  asset-based RCSA and AI risk assessment model . This role is responsible for executing structured assessments, capturing evidence, documenting risk scenarios, and preparing complete packages for onshore management review.
The analyst will work closely with system owners, AI governance workflows, and cyber leadership, supporting KRIs, reporting, and operational cadence activities. This is a documentation‑heavy and process‑driven role requiring strong discipline, consistency, and attention to detail.
Offshore resources will  draft assessments, maintain trackers, and package evidence , while  onshore leadership will own final approvals and risk decisions .

Key Responsibilities
Execute  asset‑based RCSA and AI risk assessments  using scenario‑based approaches.
Capture evidence, scoring inputs, rationale, and stakeholder comments.
Produce full assessment packages for manager review and final risk decisions.
Conduct cybersecurity risk assessments and identify threats and vulnerabilities.
Support development of  scenario‑based risk statements .
Coordinate meetings with system owners, track follow‑ups, and close documentation gaps.
Execute  AI risk assessments  using the NIST AI RMF‑aligned questionnaire and templates.
Support AI request workflows in Service Now by validating intake completeness and ensuring outputs are attached.
Monitor and report  Cyber KRIs  under senior team guidance.
Provide inputs for leadership and steering committee reporting.
Track emerging threats and contribute updates for mitigation strategies.
Document assessments in Excel and assist with migration into the new GRC platform.
Maintain artifact repositories for audit readiness.
Create exports and status summaries for leadership meetings.
Provide weekly updates on progress, open items, and roadblocks requiring escalation.