Job Title: Cybersecurity Risk Analyst
Location: Jersey City, NJ (Hybrid) Also open to candidates in Dallas, TX or Tampa, FL
Experience Level: Mid-Senior
Job Type: Contract
Industry: Financial Services
Position Summary:
We are seeking a Cybersecurity Risk Analyst to join our Information Security Risk team. This role focuses on assessing risks across applications (on-prem and cloud), infrastructure, and third-party vendors through a formalized risk assessment program. The ideal candidate is analytical, technically savvy, and experienced in evaluating cybersecurity risks within enterprise environments.
Candidates with a background in the Financial Services industry will be given preference.
Key Responsibilities:
- Develop and maintain risk assessment questionnaires tailored to applications and infrastructure (on-prem & cloud).
- Conduct cybersecurity risk assessments using a defined risk framework and methodology.
- Identify and document control deficiencies in business processes and technology systems.
- Partner with IT and business units to communicate risks and agree on findings and mitigation plans.
- Provide actionable remediation recommendations for identified control gaps.
- Evaluate and validate management responses to ensure sufficient risk mitigation.
- Generate assessment reports and risk dashboards for stakeholders.
- Document risk issues in the designated risk register.
- Guide stakeholders through policy exceptions and risk acceptance processes.
- Contribute to process improvements for the risk assessment program.
Required Skills & Experience:
- 5+ years of risk assessment experience in one or more areas: application, infrastructure, vendor risk management.
- Strong grasp of Information Risk Management best practices.
- Technical understanding of infrastructure, networks, databases, systems, and their cybersecurity implications.
- Experience in the Financial Services industry is a plus.
- Knowledge of security methodologies, policies, standards, and cybersecurity best practices.
- Ability to communicate technical concepts to both technical and non-technical audiences.
- Proficiency with MS PowerPoint and Excel for presentations and data analysis.
- Strong analytical, critical thinking, and organizational skills.
- Demonstrated ability to work collaboratively and influence decision-making.
- Strong writing and communication skills, with the ability to adapt tone for various audiences.
Preferred Education & Certifications:
- Bachelors degree in a related field preferred.
- Industry certifications such as CISSP, CISM, CRISC, or CCSP are a plus.