We are seeking an experienced IT Risk Analyst to support cybersecurity risk management, risk assessment, governance, and mitigation initiatives within a large public organization.
Required Skills
- 5–8 years of experience in Cybersecurity and IT Risk Management.
- Proven experience as an IT Risk Analyst within a large public company or enterprise environment.
- Strong experience defining and establishing risk tolerance levels, thresholds, and risk criteria.
- Experience with IT risk assessments, risk identification, mitigation, and reporting.
- Strong understanding of cybersecurity risk frameworks, controls, and governance practices.
- Hands-on experience with ServiceNow IRM (Integrated Risk Management) or a comparable GRC/IT risk management platform.
- Exceptional written, verbal, and stakeholder communication skills.
- Ability to collaborate effectively with cybersecurity, IT, compliance, audit, and business teams.
Roles and Responsibilities
- Assess and monitor cybersecurity and IT risks across the organization.
- Establish and maintain risk tolerance, thresholds, and risk criteria.
- Identify, document, and track risk mitigation activities.
- Support risk reporting, governance, and management reviews.
- Partner with stakeholders to evaluate risks and develop appropriate remediation strategies.
- Maintain risk registers, assessments, and related documentation within ServiceNow IRM or similar platforms.
- Support continuous improvement of IT risk management processes and controls.