Sr Info Security Risk Analyst I

Sr Info Security Risk Analyst I

Roles and Responsibilities

• Serve as a member of the working team for Risk Management within the GRA function.
• Evaluate and manage security exception requests, ensuring compliance with security standards and mitigating associated risks.
• Conduct information security risk assessments of internal processes and IT solutions as a subject matter expert.
• Prepare security exception risk profiles and reports for relevant stakeholders.
• Collaborate with cross-functional teams to ensure risk management practices align with business objectives and compliance requirements.
• Identify, analyze, assess, monitor, and track risks in the information security risk register.
• Monitor and manage risk mitigations and exceptions to ensure cybersecurity policies and standards are followed.
• Stay updated with the latest cybersecurity trends, emerging threats, and industry developments to provide proactive risk mitigation recommendations.

Skills Required

• Bachelor's degree in Computer Science, Information Security, or a related field. Relevant certifications such as

  CISSP, CRISC, or ISO 27001 auditor

  are a plus.
• Strong process knowledge and ability to design and/or improve risk management processes.
• Experience in utilizing tools for risk profile data collection is desirable.
• Good knowledge of cybersecurity principles, governance, and regulatory compliance.
• Deep understanding of

  risk assessment methodologies

  , vulnerability management, and security control frameworks (

  NIST RMF and CSF, ISO 27001, COBIT

  ).
• Familiarity with security controls, technologies, and best practices to mitigate cyber risks.
• Proficient in

  Microsoft Office (Excel, PowerPoint, Word)

  .
• Demonstrate sound judgment and decision-making skills.
• Strong communication and interpersonal skills.
• Ability to work independently and collaboratively, prioritize tasks, and manage time effectively.
• Excellent analytical and problem-solving skills.