IT Risk Analyst

We are seeking an experienced IT Risk Analyst to support cybersecurity risk management, risk assessment, governance, and mitigation initiatives within a large public organization.

Required Skills

• 5–8 years of experience in Cybersecurity and IT Risk Management.
• Proven experience as an IT Risk Analyst within a large public company or enterprise environment.
• Strong experience defining and establishing risk tolerance levels, thresholds, and risk criteria.
• Experience with IT risk assessments, risk identification, mitigation, and reporting.
• Strong understanding of cybersecurity risk frameworks, controls, and governance practices.
• Hands-on experience with ServiceNow IRM (Integrated Risk Management) or a comparable GRC/IT risk management platform.
• Exceptional written, verbal, and stakeholder communication skills.
• Ability to collaborate effectively with cybersecurity, IT, compliance, audit, and business teams.

Roles and Responsibilities

• Assess and monitor cybersecurity and IT risks across the organization.
• Establish and maintain risk tolerance, thresholds, and risk criteria.
• Identify, document, and track risk mitigation activities.
• Support risk reporting, governance, and management reviews.
• Partner with stakeholders to evaluate risks and develop appropriate remediation strategies.
• Maintain risk registers, assessments, and related documentation within ServiceNow IRM or similar platforms.
• Support continuous improvement of IT risk management processes and controls.