Cybersecurity Risk Analyst

Cybersecurity Risk AnalystWe are seeking a Cybersecurity Risk Analyst to join our Information Security Risk team. This role focuses on assessing risks across applications (on-prem and cloud), infrastructure, and third-party vendors through a formalized risk assessment program. The ideal candidate is analytical, technically savvy, and experienced in evaluating cybersecurity risks within enterprise environments. Candidates with a background in the Financial Services industry will be given preference.Key responsibilities include developing and maintaining risk assessment questionnaires tailored to applications and infrastructure (on-prem & cloud), conducting cybersecurity risk assessments using a defined risk framework and methodology, identifying and documenting control deficiencies in business processes and technology systems, partnering with IT and business units to communicate risks and agree on findings and mitigation plans, providing actionable remediation recommendations for identified control gaps, evaluating and validating management responses to ensure sufficient risk mitigation, generating assessment reports and risk dashboards for stakeholders, documenting risk issues in the designated risk register, guiding stakeholders through policy exceptions and risk acceptance processes, and contributing to process improvements for the risk assessment program.Required skills and experience include 5+ years of risk assessment experience in one or more areas: application, infrastructure, vendor risk management, a strong grasp of Information Risk Management best practices, technical understanding of infrastructure, networks, databases, systems, and their cybersecurity implications, experience in the Financial Services industry is a plus, knowledge of security methodologies, policies, standards, and cybersecurity best practices, ability to communicate technical concepts to both technical and non-technical audiences, proficiency with MS PowerPoint and Excel for presentations and data analysis, strong analytical, critical thinking, and organizational skills, demonstrated ability to work collaboratively and influence decision-making, and strong writing and communication skills, with the ability to adapt tone for various audiences.Preferred education and certifications include a bachelor's degree in a related field preferred and industry certifications such as CISSP, CISM, CRISC, or CCSP are a plus.