Cybersecurity Risk Analyst

We are seeking an in-office experienced IT Risk Analyst to help strengthen an organization's cybersecurity posture, manage IT risk, and support ongoing compliance initiatives. This individual will play an important role in identifying security vulnerabilities, evaluating internal controls, coordinating remediation efforts, and ensuring IT systems and business operations remain secure and resilient.

The ideal candidate has hands-on experience in IT risk management, cybersecurity, or IT audit, along with the ability to work independently, collaborate across departments, and communicate technical risks to both technical and nontechnical stakeholders.

• Conduct IT and cybersecurity risk assessments to identify, evaluate, and prioritize potential threats.
• Assess security controls for effectiveness and recommend improvements to reduce organizational risk.
• Perform control gap analyses against established frameworks, including ISO 27001, NIST, and SOC 2.
• Track remediation plans and drive identified risks, audit findings, and control deficiencies through resolution.
• Review vulnerability scans and risk dashboards to identify security weaknesses and emerging threats.
• Support cybersecurity incident investigations, documentation, and post-incident reviews.
• Assist with security compliance activities and assessments involving ISO 27001, NIST, SOC 2, and related requirements.

• Bachelor's degree in information technology, Computer Science, Cybersecurity, or a related discipline.
• 2-3 years of professional experience in IT risk management, cybersecurity, IT audit, or a related field.
• At least 2 years of direct responsibility for IT audit, risk, or compliance activities, including planning, execution, findings management, remediation tracking, and closure.
• Practical experience conducting risk assessments, evaluating IT controls, identifying control gaps, and recommending mitigation strategies.
• Working knowledge of security and compliance frameworks such as ISO 27001, NIST, and SOC 2.
• Familiarity with vulnerability management, system hardening, incident response, and cybersecurity best practices.
• Strong analytical, problem-solving, organizational, and communication skills.
• Ability to take ownership of assignments, manage competing priorities, and drive deliverables to completion with minimal supervision.