Senior Analyst, Cyber Risk Quantification and GRC
$119k - $193kForrester Research
At Forrester, we’re trusted to work on trailblazing, mission critical problems that business and technology leaders face today. That’s why we’re always looking to empower talented individuals to perform at their best every single day. We’re proud of our community of smart people and vibrant voices who come together to do what’s right by our clients and each other. Our success is driven by curiosity, courage and customer obsession. The confidence and drive to be bold at work. Join us and build an extraordinary future.About This Role:Forrester is currently looking for a Senior Analyst to conduct research and deliver strategic advice for risk management leaders and their teams. The ideal candidate has a strong understanding of risk management roles, responsibilities, and the most important security and risk trends and their business and technology implications; deep knowledge and experience with risk management practices and methods; deep knowledge and expertise in cyber risk quantification; and deep experience in developing, maintaining, and communicating risk management artifacts including risk standards, procedures, appetite, registry, and business strategy. Expertise in compliance management, internal or external audit, and GRC platforms is strongly desired.The successful candidate researches and uncovers the strategies, technologies, and best practices of risk management that create a resilient and opportunity-seeking business. The Senior Analyst delivers these insights and recommendations in written reports, presentations, inquiries, guidance sessions, and custom advisory for risk leaders across industries and geographies. Our research is aimed at helping enterprise clients solve business problems and improve business results by applying principles and best practices. We also advise vendors on their strategies, roadmaps, and messaging in line with our market insights and our recommendations for enterprise clients.Job Description:The Senior Analyst works as part of a high-performing team with a strong emphasis on collaborating with others in all aspects of the job. The Senior Analyst is expected to:Develop a deep understanding of what Forrester clients require to be successful as risk management leaders and professionals with a focus on how they help their organizations develop risk management capabilities that enable a resilient and opportunity-seeking business.Conduct primary research into risk management capabilities, practices, touchpoints, and artifacts in the context of supporting C-suite executives, business leaders, and appropriate committees.Help define the future of risk management, including how risk leaders and professionals can work with other key business functions and support organizational success.Work with different focus areas across Forrester research teams to develop a complete research portfolio on risk management, providing both input to others’ research and writing reports incorporating expertise from across Forrester to provide a “big picture” view.Partner as appropriate with other Forrester analysts on broader risk topics: risk quantification, third-party risk, systemic risk, compliance, and cyber risk.Research/write/create approximately six to eight research projects per year — a mix of written reports, tools, webinars, videos, podcasts, infographics, and other intellectual property. Build visibility for their research and contribute to Forrester client communities.Consult with clients to apply Forrester’s research in the context of their specific business environment and help solve their problems through inquiry, guidance, and advisory engagements.Establish an industry presence as an influential speaker and thinker; build relationships with journalists who cover the sector; and participate in vendor briefings and field press inquiries as necessary.Job Requirements:Five to seven years as a research analyst, consultant, or practitioner where you have led or been involved in risk management, with a focus on cyber risk quantification, or an equal amount of time as product manager for vendors that serve the market.A deep intellectual curiosity about the effect of technology on the business landscape; solid business instincts and a practical understanding of what makes companies tick; and a creative view of markets, technologies, and attitudes combined with a fascination with the future.Superior listening, critical thinking, and writing skills as well as compelling presentation skills.The ability to take complex, disparate ideas and distill them into simple, provocative concepts — and be willing to take a stand on vendors and outcomes.The ability to travel up to 20% of the time.Please note that the base salary range indicated here is inclusive of all applicable US geographies listed in this requisition, with the exception of New York City and Georgia. This salary range is based upon the position as described in the job listing. The offered compensation may vary within this range and is dependent upon the successful candidate’s primary work location, experience, training, education, and credentials.Base salary range: $119,000 - $193,000Base salary range for Georgia: $106,000 - $174,000Base salary range for New York City, NY: $136,000 – $222,000For employees based in Washington State, the percentage listed here is an estimated bonus target as a percentage of base salary, in accordance with the Forrester Employee Bonus plan. Individual and company performance, as well as other eligibility criteria, will determine the actual incentive amount.Bonus target: 10%For information on benefits, please visit: The application deadline is August 30, 2026. Please refer to the job posting on Forrester.com careers page if the deadline has been extended.#LI-JM1#LI-DNP#LI-DNIWe’re a network of knowledge and experience leading to richer, fuller careers. Here, we’re always learning. Whether you want to hone your strengths or discover new ones, Forrester is the place to go for it. It’s a place where everyone is given the tools, support, and runway they need to go far. We’ll be right there beside you, every step of the way. Let’s be bold, together. Explore #ForresterLife on:InstagramLinkedInGlassdoorFLSA Status: ExemptHere at Forrester, we welcome people from all backgrounds and perspectives. Our aim is for all candidates to be able to fully participate in Forrester’s recruitment process. If you would like to discuss a reasonable accommodation, please reach out to View email address on click.appcast.io. Forrester Research, Inc. is an Equal Employment Opportunity Employer. As a federal contractor, Forrester encourages veterans and individuals with disabilities to apply for employment.Benefits at a GlanceBenefits at a Glance - CambridgeSummaryLocation: Cambridge, MA; CT - Connecticut Remote; Chicago, IL; Washington, D.C. Remote; Philadelphia, PA; Washington; Atlanta, GA; New York, NY; Charlotte, NCType: Full time
$136k - $169k
..., and further mature the company's Governance, Risk, and Compliance program. In this position, you will blend standard GRC practices (PCI DSS, NIST, SOC 1/2) with a technical... ...in Computer Science, Information Systems, Cyber Security, or a related technical field Experience...CyberSeniorWork experience placementRemote workFlexible hours- ...A dynamic cybersecurity firm is looking for a detail-oriented Entry-Level GRC Analyst to join their remote team. In this role, you'll work closely with senior members to strengthen client cybersecurity and compliance programs. You'll be involved in assessing controls,...CyberRemote work
- ...building Wall Street's first true AI analyst. Our mission is to empower... ...The Role Rogo is hiring a GRC Analyst to support our customer... ...teams to ensure Rogo’s controls, risk posture, and security... ...001, ISO 42001, EU AI Act, UK Cyber Essentials, and GDPR, including...Cyber
- ...Oura is seeking a Senior Governance, Risk, Compliance (GRC) Analyst to join the Security Team in New York City. This role involves leading GRC initiatives, managing compliance policies, and performing risk assessments. Candidates should have over 6 years of experience...SeniorRemote workFlexible hours
- A leading utility provider in Pennsylvania seeks a GRC Cybersecurity Senior Analyst to ensure compliance with regulatory obligations. This role involves... ...with various departments to implement governance and risk management processes. The ideal candidate has a Bachelor’s...Senior
- ...Garner’s Security and Privacy trust center Maintain the risk register and drive risk identification, scoring, and reporting... ..., and procedures Report on our compliance posture to senior leadership Scale our GRC function with AI and automation, building quick wins and scoping...Senior
$105.4k - $207.8k
Position Summary Cyber SAP Security and GRC Access & Process Control Senior Consultant / Senior Engineering Management SpecialistJoin Deloitte’s Enterprise... ...programs while helping organizations reduce risk and enable business operations.Recruiting for this...CyberSeniorLocal areaVisa sponsorship- Senior GRC Analyst job at Quantexa. New York, NY. What we’re all about. We find, when we come together in the pursuit of excellence, great... ...to immediately contribute to the maturity of our Governance, Risk, and Compliance (GRC) function. This role demands a proactive...SeniorContract workTemporary workWork experience placementImmediate start
$161.6k - $202k
...that scales with the business. We're building out our dedicated GRC team to improve and mature our program! You'll join the Security... ...certifications (HITRUST, SOC 2, PCI-DSS, HIPAA), third-party risk management, security awareness training, and technical risk management...SeniorWork from homeFlexible hours$120k - $135k
Senior Actuarial AnalystDRIVE PROFITABLE GROWTH FOR THE BUSINESSAbout At-BayAt-Bay is the... ...the ground up to help businesses tackle cyber risk head on. By combining industry-leading... ...Actuarial Pricing team:As an Senior Actuarial Analyst on the Pricing team, you will be working...CyberSenior$150k - $185k
Actuary / Senior Actuary, PricingDRIVE PROFITABLE GROWTH FOR THE BUSINESSAbout At-BayAt... ...the ground up to help businesses tackle cyber risk head on. By combining industry-leading insurance... ...growing team of actuaries and actuarial analysts of diverse backgrounds and report to our...CyberSenior- Senior Governance, Risk, Compliance (GRC) Analyst job at Oura. New York, NY. At Oura, our mission is to empower every person to own their inner potential. With our award-winning Oura Ring and app, we help over 2.5 million people turn insights about sleep, activity, and...SeniorWork at officeLocal areaRemote workFlexible hours
- ...exclusive features. Position Title: Senior Actuary - Medicare Strategy... ...with product, finance, and risk adjustment teams to ensure financial... ..., Professional Liability & Cyber Pricing United States $121,000... ...1 week ago REMOTE - Actuarial Analyst II (ACA) - R9791 United States...CyberSeniorFull timeWork at officeRemote work
$132.6k - $195k
...of consumers, merchants, and drivers.About the RoleThe Global Governance, Risk, and Compliance (GRC) team is looking for a technical, security-focused Third-Party Risk Management (TPRM) Sr. Analyst. If you are comfortable and have experience working in a fast-paced...SeniorHourly payContract workWork at officeLocal areaRemote workFlexible hours$110k - $180k
...About the role We are looking for a Senior Software Engineer to help with our growth in the cyber risk modeling and quantification space. Efforts will include building on our core platform to support users in quantifying their cyber risk, assessing the status of their...CyberSeniorFull timeWork at officeFlexible hours- Optomi, in partnership with a leading financial services client, is looking for a GRC Analyst to join their team! You will support technology risk and controls initiatives across the software development lifecycle. This individual will partner with developers, DevOps teams...
- ...Summary Prestige Staffing is seeking a highly motivated GRC Analyst to support governance, risk, and compliance activities within a Microsoft-centric environment. The successful candidate will play a pivotal role in maintaining NIST-aligned security frameworks, controls...Hourly payContract work3 days per week
$200k - $270k
...7001, NIST 800-53, and FedRAMP Moderate equivalency: continuous evidence collection, control monitoring, and audit readiness held on GRC platforms (Vanta) and the tooling we build in-house. Own the policy and procedure set: draft, maintain, and run the review cycle so documentation...Local area- ...Alignerr is seeking a GRC Analyst for AI training. The role focuses on reviewing security policies, controls, and procedures, and assessing compliance across SOC 2, ISO 27001, NIST, and related standards. You will generate training data to teach AI systems GRC reasoning...Remote work
$134k - $202k
...growing our community, or shaping our story, you’ll help define what comes next. About the role: We are looking for a GRC Analyst to join our Governance, Risk & Compliance (GRC) team. You will have the opportunity to manage and maintain ongoing compliance with security and...Work at officeRemote workWorldwideMonday to Friday$134.5k - $265.1k
...Summary SAP Security and GRC Manager / Engineering Manager II Our Deloitte Cyber team helps organizations address... ...manage SAP security and governance, risk, and compliance requirements... ...development From entry-level employees to senior leaders, we believe there’s...CyberLocal areaVisa sponsorship$163.4k - $322.1k
Position Summary Our Deloitte Cyber team understands the unique... ...Work you'll do As a ServiceNow Senior Manager on the Cyber Strategy &... ...execute strategies for integrated risk management (IRM), governance, risk, and compliance (GRC), and Security Operations (...CyberSeniorLocal areaVisa sponsorship- ...Governance, Risk & Compliance (GRC) Analyst (AI Training) About the Role We're looking for experienced GRC professionals to help evaluate and improve AI systems being trained on real-world security, compliance, and risk scenarios. Your practitioner knowledge will...Hourly payOngoing contractContract workFreelanceRemote workFlexible hours
- ...VOIS is looking for a Compliance Analyst to support Vodafone's Global Roles, Governance & Compliance function. This role... ...candidate will have a strong understanding of SAP GRC controls, SOX compliance, and risk management, with responsibilities including governance...Remote work
$185.8k - $242k
...preeminent insurance and reinsurance brand. Our risk experts work together to assemble the... ...model and scenario analyses. We provide senior management with an internal view of our companies... ...risks, including emerging risks such as cyber, climate, and wildfire. Independently or...CyberSeniorTemporary work- ...GRC Consultant / Analyst / IT Risk & Compliance Role Location: Norwalk, Connecticut OR Houston, TX OR New York, NY OR Plano, TX (5 Days On-site,... ...Development, Data Analytics Infrastructure & Cloud Solutions, Cyber Security Services, etc. We make reasonable accommodations...Cyber
$78k - $124.75k
...StatesSalary: $78000 - $124750 annually + bonus + benefitsJob Function: Risk ManagementSchedule: Full timeShift: DayCareer Area: Analytics &... ...and cohesive conclusion for colleagues, business partners, and senior leadersAbility to work independently and across a matrix...Senior$86.6k - $127.1k
...Actuarial Analyst Sr We are adding to our diverse team of experts and are looking to hire... ...insurance and reinsurance brand. Our risk experts work together to assemble the right... ...responsibilities are the assessment and quantification of reserve uncertainty and reserve risk,...SeniorTemporary workTraineeshipLocal area$78k - $124.75k
...8Location: New York, NY, United States; Phoenix, AZ, United StatesSalary: $78000 - $124750 annually + bonus + benefitsJob Function: Risk ManagementSchedule: Full timeShift: DayWorkplace: HybridCareer Area: Analytics & Risk ManagementCompany: American ExpressDescriptionHow...SeniorWork experience placement$189.2k - $372.9k
Position Summary Technical Resilience FDE Senior Manager As a Senior Manager, AI... ...Engineering (Forward Deployed Engineer) in Deloitte Cyber, you will be embedded in a client's... ...stakeholders (e.g., CISO, resilience and GRC leadership) to prioritize automation of controls...CyberSeniorLocal areaRemote work
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Senior Analyst, Cyber Risk Quantification and GRC. Be the first to apply!
- risk analyst New York, NY
- risk officer New York, NY
- it risk analyst New York, NY
- senior quantitative risk analyst New York, NY
- third party risk analyst New York, NY
- operational risk specialist New York, NY
- governance risk & compliance analyst New York, NY
- risk consultant New York, NY
- operational risk consultant New York, NY
- risk analyst intern New York, NY


