Technology Risk Analyst | Cyber Risk Consultant

Role overview

Risk assessment and monitoring

• Assess risks across infrastructure, applications, cloud, networks, business systems, SaaS platforms, APIs, data systems, and emerging technologies.
• Evaluate threats, vulnerabilities, control weaknesses, and potential financial, operational, regulatory, and reputational impacts.
• Maintain risk registers, assessments, treatment plans, risk scenarios, and risk profiles; monitor KRIs, KPIs, and emerging trends.
• Assess third-party vendors, service providers, technology partners, system implementations, technology changes, and digital transformation projects.
• Analyze cybersecurity incidents and contribute to post-incident risk assessments and remediation.

Controls, remediation, and reporting

• Assess security controls, policies, procedures, frameworks, access management, data protection, vulnerability management, and security monitoring.
• Identify control gaps, recommend mitigation, track remediation, and escalate overdue or high-priority issues.
• Support enterprise risk management, business continuity, disaster recovery, technology resilience, audits, and compliance assessments.
• Prepare risk reports, dashboards, assessment summaries, management presentations, audit evidence, and management responses.
• Facilitate risk workshops, control assessments, stakeholder interviews, and remediation discussions; communicate risks to technical and non-technical audiences.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Security, Risk Management, or a related field.
• Previous experience in Technology Risk, Cyber Risk, IT Risk, Information Security, Technology Consulting, or a similar role.
• Strong understanding of cybersecurity principles, technology risk, information-security controls, threats, vulnerabilities, and risk scenarios.
• Experience conducting IT and cybersecurity risk assessments and evaluating IT general, application, and security controls.
• Knowledge of risk-management frameworks and control-assessment methodologies.
• Knowledge of network security, cloud security, identity and access management, endpoint security, and data protection.
• Strong analytical, investigative, problem-solving, documentation, reporting, presentation, and stakeholder communication abilities.

Frameworks, tools, and preferred qualifications

• Familiarity with ISO 27001, NIST CSF, COBIT, CIS Controls, or similar frameworks.
• Experience supporting technology audits, regulatory assessments, or compliance reviews is preferred.
• Familiarity with GRC platforms, vulnerability-management tools, SIEM solutions, or security assessment tools is advantageous.
• CISA, CRISC, CISSP, CISM, ISO 27001, or equivalent certifications are advantageous.

What the employer offers

• Competitive salary and comprehensive employee benefits.
• Professional development and support for relevant cybersecurity, risk, audit, and compliance certifications.
• Exposure to enterprise technology environments, transformation initiatives, and senior-management risk decisions.
• Collaborative environment with opportunities for career progression in technology and cyber risk.