Cybersecurity Specialist Job Northbrook area,Illinois USA,IT/Tech

Job Overview

Position Overview

We are seeking a Global Cybersecurity Risk Analyst to support enterprise cybersecurity, information risk, and third-party risk management initiatives. This individual will assess risks associated with technologies, business initiatives, applications, and external vendors, helping stakeholders understand potential exposures and make informed risk management decisions.
The ideal candidate combines hands‑on cybersecurity risk assessment experience with a strong understanding of vendor risk management, security controls, and regulatory requirements. Experience using Service Now to conduct and manage vendor risk assessments is particularly important.

Key Responsibilities

Conduct cybersecurity and information risk assessments for new and existing technologies, applications, business initiatives, and third‑party providers.
Identify, document, and evaluate risk scenarios, including assets, threats, vulnerabilities, existing controls, likelihood, and potential business impact.
Evaluate security controls and determine inherent and residual risk, recommending appropriate mitigation strategies and compensating controls.
Communicate risk findings and recommendations to business stakeholders, risk owners, information governance teams, and cybersecurity partners.
Support risk‑based decisions involving risk acceptance, mitigation, transfer, and avoidance.
Manage risk register entries, track identified issues and remediation activities, and monitor risks through resolution.
Support the third‑party risk management lifecycle, including vendor assessments, due diligence, control validation, ongoing monitoring, and remediation tracking.
Use Service Now to perform and manage vendor risk assessments and maintain accurate risk documentation.
Assist with customer cybersecurity questionnaires, audit requests, and evidence collection.
Apply relevant regulatory, contractual, and industry requirements when evaluating cybersecurity and third‑party risks.
Support risk reporting and identify opportunities to improve the organization’s overall cybersecurity and information risk posture.

Required Qualifications

Bachelor’s degree in Business, Computer Science, Cybersecurity, Information Security, or a related field; equivalent relevant experience may be considered.
At least 2 years of experience in cybersecurity, information security, technology risk, governance, risk and compliance (GRC), or a related field.
At least 2 years of experience supporting risk and compliance activities, technology projects, applications, systems, managed service providers, or third‑party relationships.
Hands‑on experience using Service Now for Vendor Risk Assessments or vendor risk management workflows.
Experience conducting or supporting cybersecurity risk assessments, evaluating security controls, documenting findings, and tracking remediation activities.
Understanding of third‑party risk management, information security controls, and technology risk principles.
Familiarity with cybersecurity and risk management frameworks such as NIST Cybersecurity Framework, NIST SP 800-series, ISO 27001, COBIT, or FAIR.
Strong analytical, organizational, and problem-solving skills.
Excellent written and verbal communication skills, including the ability to translate technical security concerns into business risks and actionable recommendations.
Ability to manage multiple assessments and priorities while working effectively with cross-functional stakeholders.

Preferred Qualifications