Cyber Risk and Resilience Analyst

• Map internal control frameworks to industry standards and regulatory mandates (e.g., ISO 27001, NIST CSF, SOC 2, HIPAA, GDPR, PCI-DSS)

• Act as the primary liaison between technical teams and external/internal auditors during annual cyber audits and regulatory examinations

• Define, execute, and document technical audit test plans, sampling strategies, and evidence collection workflows to support internal assurance reviews

Risk Assessment and Advisory

• Work collaboratively with Technology, Audit, and Risk teams, and operating companies, to conduct thorough cybersecurity risk, audit and assurance assessments

• Develop and sustain effective relationships with business and functional partners, offering guidance, risk oversight, and educational support

• Identify and report on non-compliance with risk frameworks, ensuring that deviations are well-documented and visible.

Mitigation and Support

• Assist the Audit and Risk Teams in identifying and tracking mitigation actions for any technology and cybersecurity issues.

• Compile and present regular security reports for stakeholders, summarizing the organization’s security status, incidents, and risk assessments.

Threat Intelligence and Security Awareness

• Monitor and stay informed about new cybersecurity threats, vulnerabilities, and trends in the industry.

• Integrate this intelligence into the organization’s security strategy.

• Foster an organization-wide security mindset by providing training and guidance on cybersecurity best practices.

Role Requirements

Professional Qualifications

• Relevant certifications in cybersecurity (such as CISM, CISSP, CRISC, or CISA) are preferred.

• Strong experience in managing partnerships and fostering trust, with the ability to influence and work collaboratively with various stakeholders

• Excellent communication skills, both verbal and written, with the ability to convey complex information effectively, particularly to executive and board-level audiences.

• Outcome-driven, with a demonstrated ability to foster teamwork across functions.

Technical and Analytical Proficiency

• Solid understanding of operational risk management frameworks, including processes for identifying, assessing, and managing risk scenarios

• Demonstrable experience with cyber assurance and audit risk assessment

• Excellent knowledge of regulatory standards, frameworks, policies and procedures

Additional Qualifications

• Proficiency in various technology domains, including systems and software architecture, cloud platforms, networking, IoT, and integration technologies

• Experience in consulting and change management, particularly in supporting technology-led transformations within an organization.

• Curiosity and awareness of rapid developments in technology and security, with the ability to assess how emerging trends may impact the organization.

• Ability to navigate complex global structures, advocating for and implementing new ideas and innovative solutions.

Not the right fit?Let us know you're interested in a future opportunity by clicking Introduce Yourself in the top-right corner of the page or create an account to set up email alerts as new job postings become available that meet your interest!