Cybersecurity Risk & Compliance Analyst

Cybersecurity Risk & Compliance Analyst

Overview

An organization is seeking a Cybersecurity Risk & Compliance Analyst to support enterprise cybersecurity, risk management, compliance, and information security initiatives. This individual will partner with business and technology teams to identify risks, evaluate security controls, support audit and compliance activities, and help strengthen overall security governance across the organization.

Responsibilities

• Support cybersecurity governance, risk management, compliance, and security program initiatives.
• Conduct risk assessments and evaluate the effectiveness of security controls.
• Assist with internal and external audit activities and remediation efforts.
• Support policy development, documentation, and compliance monitoring.
• Partner with business and technical stakeholders to identify, assess, and mitigate cybersecurity risks.
• Contribute to vendor and third-party risk management activities.
• Prepare reports, findings, and recommendations for leadership and key stakeholders.
• Promote cybersecurity awareness and risk management best practices throughout the organization.
• Support continuous improvement of security processes, controls, and governance programs.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Risk Management, Business, or a related discipline, or equivalent professional experience.
• 3+ years of experience in cybersecurity, risk management, compliance, governance, audit, information security, or a related field.
• Experience performing risk assessments, control reviews, compliance evaluations, or audit-related activities.
• Understanding of cybersecurity governance, risk management, and security control frameworks.
• Ability to analyze risks and develop practical, business-focused recommendations.
• Knowledge of regulatory and compliance requirements impacting information security programs.
• Strong analytical, organizational, and problem-solving skills.
• Excellent verbal and written communication skills with the ability to communicate effectively across technical and non-technical audiences.
• Ability to manage multiple priorities in a dynamic environment.

Preferred Qualifications

• Experience working within regulated industries.
• Familiarity with recognized cybersecurity, risk, and compliance frameworks.
• Experience supporting vendor risk management, compliance initiatives, and security audits.
• Professional certifications such as Security+, CISA, CRISC, CGRC, CISSP, CySA+, or similar credentials.
• Experience contributing to enterprise security governance and risk management programs.

Benefits

• Competitive compensation package.
• Comprehensive healthcare and wellness offerings.
• Retirement savings program with employer contribution.
• Generous paid time off and holiday schedule.
• Professional development and continuing education opportunities.
• Long-term career growth within a stable organization.