Business Analyst Information Security Risk

Dice is a company that specializes in providing technology solutions, and they are seeking a Business Analyst Information Security Risk to support their annual information security risk assessment program. The role involves facilitating stakeholder interviews, coordinating risk assessment activities, and maintaining documentation and communications.

Responsibilities:

• Support the annual information security risk assessment program
• Facilitate stakeholder interviews and evidence gathering
• Coordinate risk assessment activities with internal teams and third-party service providers
• Prepare and maintain documentation, internal communications, and status updates
• Support project coordination and ensure timely completion of risk assessment activities

Requirements:

• 5 7 years of experience in Information Security, Cybersecurity, or IT Risk Management
• Experience performing information security or cybersecurity risk assessments
• Experience in cybersecurity risk analysis
• Knowledge of information security frameworks and best practices, including NIST 800-30, NIST CSF, and COBIT
• Strong understanding of Information Security principles and risk management practices
• Proven project management and coordination skills
• Experience facilitating stakeholder interviews and evidence collection
• Strong written and verbal communication skills
• Technical writing and documentation experience
• Bachelor's degree in Information Systems, Information Security, Computer Science, or a related field
• Experience with collaboration and project management tools such as Confluence and Azure DevOps (ADO)
• Strong analytical skills with proficiency in Excel and Power BI
• Experience working in a regulated industry