Role: Business Analyst Information Security Risk
Remote Role
JD;
Responsibilities
- Support the annual information security risk assessment program.
- Facilitate stakeholder interviews and evidence gathering.
- Coordinate risk assessment activities with internal teams and third-party service providers.
- Prepare and maintain documentation, internal communications, and status updates.
- Support project coordination and ensure timely completion of risk assessment activities.
Requirements
- 5 7 years of experience in Information Security, Cybersecurity, or IT Risk Management.
- Experience performing information security or cybersecurity risk assessments.
- Experience in cybersecurity risk analysis.
- Knowledge of information security frameworks and best practices, including NIST 800-30, NIST CSF, and COBIT.
- Strong understanding of Information Security principles and risk management practices.
- Proven project management and coordination skills.
- Experience facilitating stakeholder interviews and evidence collection.
- Strong written and verbal communication skills.
- Technical writing and documentation experience.
- Bachelor's degree in Information Systems, Information Security, Computer Science, or a related field.
- Experience with collaboration and project management tools such as Confluence and Azure DevOps (ADO) is preferred.
- Strong analytical skills with proficiency in Excel and Power BI are preferred.
- Experience working in a regulated industry is a plus.