Principal Cyber Risk Analyst - Remote

The Principal Cyber Risk Analyst is responsible for leading the organization's enterprise cyber risk management program by identifying, assessing, prioritizing, and reporting technology and cybersecurity risks across the enterprise. This role serves as a strategic advisor to technology, cybersecurity, and business leadership by providing risk insights that support decision‑making, risk treatment strategies, regulatory compliance, and organizational resilience.

The position partners closely with cybersecurity, infrastructure, application, cloud, data, privacy, compliance, audit, and business stakeholders to establish a sustainable risk management framework, drive remediation efforts, measure risk reduction, and communicate risk posture to executive leadership and governance committees.

Core Responsibilities

• Lead the identification, assessment, analysis, and prioritization of technology and cybersecurity risks across infrastructure, applications, cloud environments, operational technology, data platforms, and third‑party ecosystems
• Establish and maintain an enterprise‑wide cyber risk register, ensuring risks are accurately documented, quantified, monitored, and reported
• Provide expert guidance on emerging technology risks, threat trends, and control weaknesses that may impact organizational objectives
• Translate complex technical risks into business‑focused risk narratives, impacts, and mitigation strategies.
• Lead risk review meetings and challenge sessions with technology and business leaders to ensure risks are understood, accepted, mitigated, or escalated appropriately
• Partner with security, technology, and business teams to validate remediation plans and monitor progress toward risk reduction objectives
• Facilitate discussions to remove barriers to remediation and ensure risk treatment activities align with enterprise priorities
• Provide oversight of cybersecurity risk assessments associated with vendors, service providers, and strategic technology partners
• Lead initiatives to enhance the organization's cyber risk management framework, methodology, tools, and reporting capabilities
• Mentor junior analysts and provide thought leadership across the cyber risk management function
• Act as a trusted advisor to senior technology leaders, cybersecurity leadership, risk officers, and business executives
• Performs other duties as assigned

Education/

Certifications:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Risk Management, Business Administration, or related field
• One or more preferred certifications:
  • CISSP
  • CRISC
  • CISM
  • CGEIT
  • CISA
  • FAIR Certification

• 10+ years of progressive experience in cybersecurity, information security, technology risk management, governance, risk and compliance (GRC), audit, or related disciplines
• Experience leading enterprise cyber risk assessments and facilitating risk evaluations across infrastructure, cloud platforms, applications, data, operational technology, and third‑party environments
• Demonstrated experience developing and managing cyber risk registers, issue management processes, risk treatment plans, and executive risk reporting
• Experience partnering with technology owners and business leaders to prioritize remediation activities based on risk exposure and business impact
• Experience supporting or leading regulatory, compliance, and audit initiatives including SOX, HIPAA, PCI‑DSS, NIST, ISO 27001, and other relevant frameworks
• Experience presenting cybersecurity risks, trends, and remediation status to executive leadership, governance committees, and internal audit stakeholders
• Demonstrated success leading strategic cybersecurity initiatives and influencing cross‑functional teams without direct…