IT Risk Analyst

Position: IT Risk Analyst

• Location: Blue Ash, OH
• Duration:
• USC and GC holders only
• Pay Rate: $60-70

Overview: The IT Risk Analyst supports proactive IT risk management by identifying, assessing, and reporting on potential risk exposures. The role involves fostering cross-functional relationships, assessing enterprise risk posture, and providing independent recommendations to reduce risk within established appetites.

Requirements:

• Experience: 5-10 years in GRC, risk assessments, or compliance
• Technical Skills: Proficiency with compliance management tools (e.g., Archer, ServiceNow)
• Skills: Strong in regulatory frameworks, critical thinking, communication, quality management, and process improvement
• Certifications: CISSP, CISA, CRISC (preferred)
• Personal Attributes: Attention to detail, strategic thinking, organization, and ability to embrace complexity

Top Must-Haves:

• Risk Management Experience: Skilled in cyber risk assessments and governance, risk, and compliance (GRC)
• Cybersecurity Frameworks: Familiarity with NIST-CSF or similar standards
• Risk Tools Proficiency: Experience with tools like Archer, ServiceNow, MetricStream
• Effective Communication: Ability to communicate complex cyber risk concepts to technical and non-technical audiences
• Certification: CISSP, CISA, CRISC (preferred but not mandatory)

Key Responsibilities:

• Conduct and manage cyber risk assessments
• Align internal controls with cyber risk treatment requirements
• Develop, analyze, and update threat and risk scenarios
• Communicate cyber risk insights to management and stakeholders
• Facilitate cyber risk lifecycle management, risk appetite updates, and decision-making
• Create detailed cyber risk dashboards/reports for complex risk metrics
• Support internal/external audits and regulatory exams
• Promote a cyber risk-aware culture through training and best practices