Cyber Risk Analyst/Consultant

About the role

A Cyber Risk Analyst/Consultant who supports organizations in spotting, evaluating, and reducing cybersecurity risks. The role covers reviewing security posture, aiding compliance with standards, and guiding clients on building robust cyber programs.

Responsibilities

1. 1

   Carry out cyber risk assessments and examine threats, vulnerabilities, and possible impacts

2. 2

   Review client security controls and propose enhancements in line with industry frameworks

3. 3

   Assist with risk quantification, reporting, and communication to technical and executive stakeholders

4. 4

   Help with compliance readiness for standards including ISO 27001, NIST, or regulatory mandates

5. 5

   Create risk registers, mitigation plans, and security policies for clients

6. 6

   Keep up to date on new cyber threats, attack vectors, and industry best practices

Requirements

• Bachelor's degree in cybersecurity, information technology, computer science, or a comparable discipline

• Experience in cyber risk management, information security, or IT risk consulting

• Knowledge of security frameworks and standards such as NIST, ISO 27001, or CIS Controls

• Acquaintance with risk assessment methodologies and tools

• Strong analytical, documentation, and communication abilities

• Relevant certifications such as CISSP, CISM, CRISC, or CEH are a plus