IT Governance and Risk Analyst

What Makes a Honda, is Who makes a HondaHonda has a clear vision for the future, and it’s a joyful one. We are looking for individuals with the skills, courage, persistence, and dreams that will help us reach our future-focused goals. At our core is innovation. Honda is constantly innovating and developing solutions to drive our business with record success. We strive to be a company that serves as a source of “power” that supports people around the world who are trying to do things based on their own initiative and that helps people expand their own potential. To this end, Honda strives to realize “the joy and freedom of mobility” by developing new technologies and an innovative approach to achieve a “zero environmental footprint.”We are looking for qualified individuals with diverse backgrounds, experiences, continuous improvement values, and a strong work ethic to join our team.If your goals and values align with Honda’s, we want you to join our team to Bring the Future!Job PurposeAct as an IT risk quantification analyst in Cybersecurity Governance, Risk, and Compliance, to evaluate and measure the potential impact of cybersecurity threats on an organization, using structured methodologies and industry frameworks, e.g. - FAIR, MITRE, and NIST.The incumbent will identify, analyze, and prioritize risks based on likelihood and potential loss. This role involves collaborating with cybersecurity teams and business stakeholders to ensure risk insights support organizational objectives and regulatory requirements. The analyst will help develop and recommend mitigation strategies while translating complex technical findings into clear, data driven guidance for decision makers.Key AccountabilitiesIT Third Party Risk Management (TPRM)• Monitor and improve IT risk processes, tools, and documentation• Update risk scenarios, benchmarks, and mitigation strategies• Maintain the Information Security Management System (ISMS)• Advise on balancing security controls with business impactRisk & Control Self Assessment (RCSA)• Conduct cybersecurity risk assessments and identify control gaps• Document results, prepare management reports, and drive remediation• Support and train teams on RCSA standards and methodologiesRisk Modeling & Analysis• Develop and maintain data, process, and event based risk models• Quantify risk, validate models, and communicate findings to stakeholdersData Collection & Reporting• Gather, analyze, and document cybersecurity risk data• Maintain the risk register and data librariesCollaboration & Domain Expertise• Partner cross functionally to implement risk mitigation• Stay current on cyber threats, regulations, and industry best practicesQualifications, Experience, and SkillsEducation:A Bachelors level degree in IT / IS / Cybersecurity or equivalent level of relevant industry experience.Desired Certifications (any): OpenFAIR, CCSK, CISSP, CISM, or equivalent are highly desirable.Must have at least 5 or more years of demonstrable relevant experience in the industry, specifically in the cybersecurity space. Core skills must include risk assessment, analytical thinking, communication, and strong knowledge of cybersecurity frameworks, regulatory obligations, and evolving threat landscapes.Be well-familiar with industry guidelines and best practices around TPRM (Third Party Risk Managment).Other job-specific skills:Decision Making & Critical Thinking: Ability to analyze situations accurately and make informed, productive decisions using appropriate tools and judgment.Communicating Complex Concepts: Skilled in simplifying and summarizing complex technical information using clear, audience appropriate communication techniques.Problem Solving: Able to recognize, anticipate, and resolve organizational or operational issues using structured problem solving methods.Project Management: Knowledge of effective planning, organizing, monitoring, and resource coordination to achieve project objectives.Technical Excellence: Ability to apply technology knowledge to develop solutions for significant technical challenges.Compliance & Assurance: Understands compliance processes and standards; enhances internal controls as requirements evolve.Frameworks & Industry Standards: Aligns cybersecurity programs and standards with regulations, business context, and threat landscapes.IT Security Policies: Applies security policies, standards, and procedures to ensure compliance.Statistical Analysis & Measurement: Uses mathematical and statistical tools to perform accurate analysis and measurement.WorkstyleThis is an onsite position, based in Ohio.Visa sponsorship issuesThis position is not eligible for work visa sponsorship.Relocation assistanceThis posiiton is not eligible for relocation assistance.What differentiates Honda and make us an employer of choice?Total Rewards:Competitive Base Salary (pay will be based on several variables that include, but not limited to geographic location, work experience, etc.)Paid OvertimeRegional Bonus (when applicable)Industry-leading Benefit Plans (Medical, Dental, Vision, Rx) Paid time off, including vacation, holidays, shutdownCompany Paid Short-Term and Long-Term Disability 401(K) Plan with company match + additional contributionCareer Growth:Advancement OpportunitiesCareer Mobility Education Reimbursement for Continued LearningTraining and Development programs Additional Offerings:Tuition Assistance & Student Loan RepaymentLifestyle AccountChildcare Reimbursement AccountElder Care SupportWellbeing ProgramCommunity Service and Engagement ProgramsProduct ProgramsHonda is an equal opportunity employer and considers qualified applicants for employment without regard to race, color, creed, religion, national origin, sex, sexual orientation, gender identity and expression, age, disability, veteran status, or any other protected factor.Job SummaryJob number: 10481Profession: Information Technology