Cybersecurity Risk Analyst

The Cybersecurity Risk Analyst evaluates security controls and posture using NIST 800-53 and CIS Controls as practical guides, focusing on real-world threat exposure rather than checkbox compliance. You will analyze cyber risks by likelihood, business impact, and threat intelligence, translating technical vulnerabilities into actionable risk scenarios for stakeholders. Collaborate with security engineers, system administrators, and developers to drive technical risk remediation and security improvements. Maintain an accurate risk register with precise risk descriptions, threat scenarios, and metrics that reflect meaningful security posture changes. Assess third-party security risks through technical questionnaires, penetration test reviews, architecture analysis, and vendor compliance documents. Support risk-based security metrics and participate in internal and external audits for PCI-DSS, GDPR, and SOX while partnering with global IT and business teams.