1 month ago Be among the first 25 applicants
This range is provided by MDA Edge. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.
Base pay range
$65.00 / hr - $65.00 / hr
Job Locations : Dallas, TX | Tampa, FL | Jersey City, NJ
Note : Preference will be given to candidates with prior experience in the Financial Services Industry.
Position Summary
The Information Risk Analyst / Cybersecurity Risk Analyst will be responsible for developing risk assessment questionnaires, conducting risk assessments for applications (on-premises and cloud), infrastructure (on-premises and cloud), and vendors, in accordance with a defined risk framework. These assessments will be executed through a formalized risk assessment program. The role involves identifying risks related to how business and technology teams utilize IT systems and supporting technological infrastructure.
Key Responsibilities
- Conduct research on technology security, cybersecurity best practices, and develop risk assessment questionnaires.
- Plan and perform risk assessments following the organization's methodology, documenting and communicating control deficiencies in business processes and technology systems.
- Collaborate with Enterprise IT to address cybersecurity risk findings, new initiatives, and ad hoc processes, covering areas such as databases, operating systems, networking devices, storage systems, and cloud solutions.
- Provide risk remediation recommendations to business and technology teams to mitigate identified control gaps.
- Clearly articulate risks in a way that is understandable to both business and technology stakeholders.
- Evaluate management responses to ensure remediation plans effectively address identified risks.
- Prepare assessment reports and dashboards for IT owners.
- Maintain risk documentation within the designated risk register.
- Guide business and technology teams through policy exception and risk acceptance processes.
- Contribute to the continuous improvement of the risk assessment process.
Required Experience
5+ years of experience in risk assessment within application security, infrastructure security, or vendor risk management.Experience in the Financial Services Industry is preferred but not mandatory.Strong understanding of Information Risk Management best practices.Technical proficiency in cybersecurity concepts and IT systemsRequired Knowledge & Skills
Strong technical knowledge of infrastructure, networks, databases, and systems and their impact on cybersecurity risk.In-depth understanding of security methodologies, policies, and industry best practicesAbility to articulate technical concepts effectively to both technical and non-technical audiences.Strong analytical and critical thinking skillsExcellent presentation skills (MS PowerPoint).Proficiency in data manipulation using MS Excel.Ability to build consensus, influence decision-making , and foster collaboration across teams.Strong written and verbal communication skillsExceptional organizational skills with the ability to adapt to a dynamic work environment.Sound business judgment and ability to engage with all levels of management.Education & Certifications
Bachelor's degree preferredRelevant industry certifications such as CISSP, CISM, CRISC, or CCSP are preferred.Seniority level
Mid-Senior levelEmployment type
Full-timeJob function
OtherIndustries
IT Services and IT ConsultingJ-18808-Ljbffr