Sr Risk Analyst

Sr Risk AnalystDo you want to develop your career and make an impact in the fast-growth, fast-moving B2B technology space? At Informa TechTarget, you'll collaborate and grow alongside some of the industry's most respected experts. You'll work with leading brands and be exposed to world-shaping innovations. You'll apply your energy and intellect to helping clients be faster to market and faster to revenue.We're a vibrant community of world-class practitioners – over 2000 colleagues strong – with offices in 19 locations around the world. We're traded on Nasdaq and also part of Informa PLC, a global leader in business-to-business events, digital services, and academic research in the FTSE 100.Informa TechTarget (Nasdaq: TTGT) informs, influences and connects the world's technology buyers and sellers, to accelerate growth from R&D to ROI. With an unparalleled reach of over 220 highly targeted technology-specific websites and more than 50 million permissioned first-party audience members, Informa TechTarget has a unique understanding of and insight into technology markets.Underpinned by those audiences and their data, we offer expert-led, data-driven, and digitally enabled services that deliver significant impact and measurable outcomes to our clients. We provide our customers with:Trusted information that shapes the industry and informs investmentIntelligence and advice that guides and influences strategyAdvertising that grows reputation and establishes thought leadershipCustom content that engages and prompts actionIntent and demand generation that more precisely targets and convertsOur organization is committed to sustainability, diversity, wellbeing, and ethical working practices.Job DescriptionThis role is based in our Newton, MA office. We are seeking an experienced and strategic Senior Cyber Risk Analyst to join our team. This role requires deep expertise in enterprise cybersecurity risk management, with responsibility for identifying, assessing, and mitigating cyber risks across the organization. You will lead enterprise risk assessments, partner with engineering and security teams on strategic initiatives, and provide executive-level reporting on the organization's cyber risk posture. This position also includes emerging responsibilities in AI governance and technology risk as part of a comprehensive enterprise risk management approach.Key ResponsibilitiesEnterprise Risk Assessment & ManagementLead comprehensive enterprise-wide cyber risk assessments across all business operations, systems, and infrastructureIdentify, analyze, and evaluate cybersecurity risks including threats, vulnerabilities, and potential business impactsDevelop and maintain enterprise risk registers, ensuring all cyber risks are properly documented, prioritized, and monitoredCreate and implement risk treatment plans and mitigation strategies to reduce organizational exposureConduct risk assessments for new technologies, systems, and business initiatives in partnership with engineering and product teamsUtilize risk management frameworks (NIST CSF, ISO 27005, FAIR) to quantify and communicate riskCloud Security & Infrastructure RiskAssess security risks associated with cloud environments (AWS, Azure, GCP) and hybrid infrastructureEvaluate cloud architecture designs and configurations for security and compliance risksPartner with cloud engineering teams to implement security controls and risk mitigation measuresReview and assess risks related to cloud migration projects and infrastructure changesVulnerability & Threat ManagementOversee vulnerability management program effectiveness and risk prioritizationAnalyze vulnerability scan results and penetration test findings to assess enterprise risk exposureWork with IT and security teams to ensure timely remediation of critical vulnerabilitiesMonitor threat intelligence and assess potential impact to the organizationEvaluate the effectiveness of security controls in mitigating identified vulnerabilitiesThird-Party & Vendor Risk ManagementConduct cybersecurity risk assessments of third-party vendors, suppliers, and business partnersReview vendor security questionnaires, certifications, and audit reportsAssess risks associated with vendor access to systems and dataMonitor ongoing third-party risk and ensure compliance with security requirementsSupport vendor risk remediation efforts and contract security requirementsGovernance, Compliance & PolicyEnsure compliance with relevant cybersecurity regulations, standards, and frameworks (SOC 2, ISO 27001, NIST, Sox, etc.)Support the development and maintenance of cybersecurity policies, standards, and proceduresParticipate in internal and external audits related to cybersecurity and risk managementMonitor regulatory changes and assess impact on organizational risk postureContribute to the organization's cybersecurity governance structure and risk committee activitiesExecutive Reporting & MetricsPrepare comprehensive cyber risk reports and presentations for executive leadership, board of directors, and key stakeholdersDevelop and maintain cyber risk dashboards with Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs)Communicate complex cybersecurity risks in business terms to non-technical executive audiencesProvide regular updates on risk trends, threat landscape, and mitigation progressPresent risk-based recommendations to support strategic business decisionsStrategic Partnership & AdvisoryPartner with engineering, IT, security, and product teams on new initiatives and technology implementationsProvide expert cybersecurity risk guidance during project planning and system design phasesAdvise business units on cyber risk implications of strategic decisions and initiativesCollaborate with cross-functional teams including legal, compliance, privacy, and internal auditEmerging Technology & AI GovernanceAssess cybersecurity and privacy risks associated with AI/ML systems and emerging technologiesSupport the development of AI governance frameworks and responsible AI practicesEvaluate risks related to AI implementation including data privacy, model security, and ethical considerationsStay current with emerging technology risks and evolving regulatory requirementsQualificationsProfessional SkillsExceptional analytical and critical thinking skills with strong attention to detailExcellent written and verbal communication skills, particularly for executive audiencesAbility to translate technical cybersecurity concepts into business risk languageStrong stakeholder management and influence skills across all organizational levelsProficiency in data analysis and visualization toolsProject management capabilities and ability to manage multiple prioritiesPreferred QualificationsMaster's degree in Cybersecurity, Information Security, Risk Management, or related fieldBackground in information security operations or security engineeringKnowledge of security architecture and secure design principlesExperience with security incident response and business continuity planningFamiliarity with AI/ML security risks and emerging technology governanceUnderstanding of privacy regulations (GDPR, CCPA, PIPEDA)Key CompetenciesStrategic risk thinking and business acumenProactive risk identification and problem-solvingExecutive presence and communicationStakeholder influence and relationship buildingAdaptability to evolving threat landscapeEthical judgment and integrityContinuous learning and professional developmentCollaboration and cross-functional partnershipAdditional InformationTechTarget, Inc., doing business as Informa TechTarget, including its subsidiaries is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws. We strictly prohibit and do not tolerate discrimination against employees, applicants, or any other covered persons because of race, color, sex (including pregnancy), age, national origin or ancestry, ethnicity, religion, creed, sexual orientation, gender identity or expression, status as a veteran, and basis of disability or any other federal, state or local protected class. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, training, promotion, discipline, compensation, benefits, and termination of employment. If you would like to request reasonable adjustments or accommodations to assist your participation in the hiring process and, or in the advertised position, please inform the appropriate Talent Acquisition Partner for the role once they