Job description

Job Description: Our client is seeking an experienced Sr. Cybersecurity Risk Analyst to join their Information Security team. This role will be responsible for identifying, assessing, monitoring, and mitigating information security and technology risks while helping ensure compliance with applicable regulations, industry standards, and organizational security policies. The Sr. Cybersecurity Risk Analyst will work across Information Security, IT, business, and other cross-functional teams to conduct risk assessments, strengthen security controls, support audits and compliance activities, develop and maintain security policies, and contribute to security incident response efforts. The ideal candidate will have strong experience in security governance, risk management, compliance, vendor risk management, or security operations, along with a solid understanding of security frameworks such as NIST CSF and ISO 27001. Experience with FedRAMP, AI governance, and federal agency programs is highly desirable. Key Responsibilities: Identify, assess, document, and mitigate information security and technology risks across the organization. Conduct security and IT risk assessments and provide recommendations to reduce identified risks. Develop, review, maintain, and update information security policies, standards, procedures, and controls. Monitor the effectiveness of security controls and identify opportunities for improvement. Support governance, risk, and compliance activities across IT and Information Security. Ensure security practices align with applicable local, state, and federal regulations and industry standards. Support compliance with security frameworks and standards, including NIST CSF, ISO 27001, and CCSK-related practices. Coordinate and support internal and external security audits, assessments, and compliance reviews. Assist with vendor and third-party security risk assessments and ongoing risk monitoring. Support security incident response activities, including data collection, analysis, documentation, and follow-up. Contribute to security requirements for new applications, systems, projects, and technology initiatives. Partner with IT, Security, Risk, and business stakeholders to identify security requirements and ensure appropriate controls are implemented. Provide security awareness, training, and guidance to employees and stakeholders as needed. Stay current with emerging cybersecurity threats, regulatory requirements, industry standards, and security best practices. Contribute to the organization's evolving AI governance and risk management practices. Prepare risk, compliance, audit, and security reports for management and other stakeholders. Assist with continuous improvement of the organization's information security governance and risk management program. Required Qualifications: Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Risk Management, or a related field, or equivalent experience. 5+ years of experience in information security, with experience in one or more areas such as: Governance, Risk & Compliance (GRC) Vendor / Third-Party Risk Management Security Governance Security Operations Information Security Risk Management Security Compliance Hands-on experience conducting security or IT risk assessments and developing risk mitigation strategies. Strong understanding of information security policies, standards, controls, and governance processes. Experience working with security frameworks such as NIST/NIST CSF and ISO 27001. Experience supporting security audits, compliance assessments, and regulatory requirements. Strong analytical, problem-solving, documentation, and communication skills. Ability to collaborate effectively with technical and non-technical stakeholders. Preferred Qualifications: Experience supporting Federal agency programs or FedRAMP. Experience with AI governance, AI risk management, or emerging technology governance. Experience with vendor/third-party risk management programs. Knowledge of cloud security and cloud governance. Experience supporting security incident response and investigations. Experience with CCSK or cloud security frameworks. Professional certification such as: CISSP CRISC CCSK / CSA certification Ideal Candidate: The ideal candidate is a seasoned information security professional who combines strong risk management and GRC expertise with the ability to work collaboratively across technical and business teams. This individual should be comfortable assessing risk, evaluating security controls, supporting audits, developing policies, and translating security and regulatory requirements into practical business and technology solutions. Salary/Rate: $50-$58/HR (depends on experience level). This is a contract position with candidates expected to work 40 hours/ week.

Requirements

Must-haves

Identify, assess, document, and mitigate information security and technology risks across the organization.
Conduct security and IT risk assessments and provide recommendations to reduce identified risks.
Develop, review, maintain, and update information security policies, standards, procedures, and controls.
Monitor the effectiveness of security controls and identify opportunities for improvement.
Support governance, risk, and compliance activities across IT and Information Security.
Ensure security practices align with applicable local, state, and federal regulations and industry standards.
Support compliance with security frameworks and standards, including NIST CSF, ISO 27001, and CCSK-related practices.
Coordinate and support internal and external security audits, assessments, and compliance reviews.
Assist with vendor and third-party security risk assessments and ongoing risk monitoring.
Support security incident response activities, including data collection, analysis, documentation, and follow-up.
Contribute to security requirements for new applications, systems, projects, and technology initiatives.
Partner with IT, Security, Risk, and business stakeholders to identify security requirements and ensure appropriate controls are implemented.
Provide security awareness, training, and guidance to employees and stakeholders as needed.
Stay current with emerging cybersecurity threats, regulatory requirements, industry standards, and security best practices.
Contribute to the organization's evolving AI governance and risk management practices.
Prepare risk, compliance, audit, and security reports for management and other stakeholders.
Assist with continuous improvement of the organization's information security governance and risk management program.
Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Risk Management, or a related field, or equivalent experience.

Nice-to-haves

Experience supporting Federal agency programs or FedRAMP.
Experience with AI governance, AI risk management, or emerging technology governance.
Experience with vendor/third-party risk management programs.
Knowledge of cloud security and cloud governance.
Experience supporting security incident response and investigations.
Experience with CCSK or cloud security frameworks.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: careers-page
Effort: medium