Remote Cyber Risk Data Analyst

Required Skills & Experience

• Bachelor’s degree
• 3–7 years of experience in business analysis, data analysis, risk analysis, program analysis, or a similar role.
• Experience analyzing large or complex datasets to identify trends, inconsistencies, anomalies, and changes in performance.
• Experience developing, monitoring, and reporting on business, operational, cybersecurity, compliance, or risk metrics.
• Strong Microsoft Excel and PowerPoint skills, with experience creating dashboards, reports, or executive-level presentations.
• Ability to investigate why data or performance metrics have changed and work with data owners, technical teams, and business stakeholders to determine the cause.
• Strong executive-level communication skills with the ability to explain complex data to technical and nontechnical stakeholders.
• Proactive, detail-oriented, and inquisitive personality with the confidence to question data and follow up across multiple teams.

Nice to Have Skills & Experience

• Experience working with cybersecurity risk, vulnerability, compliance, audit, assurance, or technology-risk data.
• Experience supporting enterprise-level metrics, governance, risk, or compliance programs.
• Experience with dashboards or business-intelligence tools such as Power BI or Tableau.
• Experience performing ad hoc analysis and developing repeatable reporting processes.
• Experience gathering and managing requirements for data systems or reporting solutions.
• Experience working in a large, matrixed organization with multiple business units and senior stakeholders.

Job Description

Insight Global is seeking a Remote Cyber Risk Data Analyst to support an enterprise cybersecurity-risk program in support of one of our large clients. This individual will analyze risk data across multiple program workstreams, prepare weekly metrics reporting, identify unexpected trends or inconsistencies, and investigate why reported results have changed. This person will not directly remediate cybersecurity findings. Instead, they will identify concerns, establish the cause, communicate the impact, and ensure the responsible teams understand and address the issue. The ideal candidate is highly proactive and comfortable speaking up, asking questions, following up with business units, and explaining complex metrics to senior executives. Their day to day will include but is not limited to:

• Monitor cybersecurity risk data and dashboards across the program’s workstreams to understand overall risk posture and performance.
• Analyze weekly metrics and trends, looking for unexpected increases/decreases, inconsistencies, missing data, or numbers that do not make sense.
• Investigate anomalies to determine why a metric changed, including whether it is caused by a data-quality/import issue or an actual change in cybersecurity risk.
• Partner with data owners and technical teams to validate data and understand what is driving changes in the numbers.
• Engage directly with business units when their metrics or findings require additional information, follow-up, or action.
• Track identified findings and accountability, ensuring the appropriate business or technical team is aware of the issue and progressing toward remediation.
• Perform ad hoc analysis when leadership asks questions about specific business units, risks, trends, or areas of exposure.
• Prepare weekly reports, dashboards, and presentations that clearly communicate risk metrics and program status.
• Present findings to senior leadership and business-unit CISOs, confidently explaining why numbers changed, what is driving the issue, and what is being done about it.
• Support improvements to reporting and data processes by identifying gaps and helping define requirements for better data collection, analysis, and reporting.