Cybersecurity Risk Analyst Job at Sharp Decisions, Jersey City, NJ

SWE0c1h0OFZKbnFyR1FTQnN5YXV5Y1lSNVE9PQ==
  • Sharp Decisions
  • Jersey City, NJ

Job Description

Cybersecurity Risk Analyst

The Information Risk Analyst/Consultant is responsible for creating risk assessment questionnaires, performing risk assessments of applications (on-premises and cloud), infrastructure (on-premises and cloud), as well as vendors assessments against a defined risk framework. These assessments will be conducted through a formalized risk assessment program. The Information Risk Analyst will have the ability to identify risks that are associated how business and technology workforce utilize information technology and in supporting technological systems.

Principal Responsibilities:

  • Research technology security issues, cybersecurity best practices, and create risk assessments questionnaires that can be used to assess applications and infrastructure.
  • Schedule and perform information risk assessments using company methodology; identify, document and communicate control deficiencies in business processes and technology systems.
  • Partner with the Enterprise IT to agree on cybersecurity risk findings identified through the risk assessment (e.g., Databases, Operating Systems, Networking Devices, Storage Systems, Cloud Systems, etc.), new initiatives, and ad hoc processes.
  • Provide risk remediation recommendations that the business and technology may implement to mitigate identified control gaps.
  • Partner with business and IT to ensure that risks are clearly articulated in a manner that is understood by business and technology audiences.
  • Evaluate management responses to ensure that remediation plans and tasks adequately address identified control gaps.
  • Create assessment reports and dashboards that will be communicated with various IT owners.
  • Document risk issues in the designated risk register
  • Assist the business and technology groups through the company process for policy exceptions and risk acceptance.
  • Participate in and influence information risk assessment process improvement.

Experience:

  • 5+ years of risk assessment experience in one or more areas: application, infrastructure, vendor risk management
  • Financial Services Industry experience a plus but not required.
  • Proficiency with Information Risk Management best practices
  • Proficiency with information technology in general and cybersecurity technical issues

Knowledge and Skills Required:

  • Proven technical knowledge of infrastructure, networks, databases and systems and how they affect an organizations cybersecurity risk.
  • Proven knowledge of security methodologies, policies, standards and best practices.
  • Proven knowledge of information technology systems, infrastructure and operations.
  • Ability to explain and articulate technical concepts using both technical and non-technical terms.
  • Critical thinking and analytical skills.
  • Excellent presentation skills (MS PowerPoint)
  • Ability to manipulate data in a spreadsheet (MS Excel)
  • Ability to work collaboratively by building consensus and influencing decision making to foster forward progress with projects and initiatives.
  • Strong oral and written communication skills.
  • Excellent organizational skills, coupled with ability to be versatile and flexible.
  • Sound business judgment and the ability to work successfully with all levels of management.
  • Excellent grammar and style skills; ability to adapt writing style for different audiences and media.

Education, Training and Certification:

  • Bachelors degree preferred.
  • CISSP/CISM/CRISC/CCSP certification preferred

Job Tags

Flexible hours,

Similar Jobs

Airswift

Geoscientist/Explorationist Onshore Job at Airswift

Our client, a major O&G company, is looking for a Geoscientist/Explorationist Onshore to work on a 12-month contract in Houston, TX area Geoscientist with 5-10 years of experience in unconventional reservoirs including hands-on work with an E&P operator. Experience...

Navisync

Senior Medical Editor Job at Navisync

 ...Job Description: The Senior Editor will join a team of experienced editors and serve as lead on several client accounts. This person...  ...style and maintain style guides for assigned brands. This is a remote position with the option to work in the office. NOTE: Only... 

DCS Contracting, Inc.

Underground Foreman - Wet Utilities Job at DCS Contracting, Inc.

Join Our Team as an Underground Foreman at DCS Contracting! Are you ready to take your career in heavy civil construction to the next level? At DCS Contracting , were looking for a highly motivated Underground Wet Utility Foreman to join our team-oriented workforce...

Continental Siding

Recruiter Job at Continental Siding

 ...action? If soyoure exactly who were looking for. Were searching for an enthusiastic, construction-minded Installation Recruiter who loves being out in the field, shaking hands, making connections, and finding skilled Subcontractor Installer Crews who take... 

Truity Partners

Transaction Specialist Job at Truity Partners

 ...volume transactions, controls, and time-sensitive processing. Role is 100% on-site with hours of 8am to 5pm or 8:30am to 5:30pm Monday through Friday. Please apply for immediate consideration. Responsibilities: Process daily financial transactions including cash...