Cyber Risk Analyst

About Eleven Recruiting

We are a specialized technology staffing agency supporting professional and financial services companies. Why do we stand out in technology staffing? We listen and act as advisors for our candidates on how they can best add value, find interesting projects, and pave a path for career advancement. We advocate for best pay, diversity in tech, and best job-fit for every candidate we place.

Our client, an investment firm, is seeking an experienced Cyber Risk Analyst to join their team in New York, NY!

Responsibilities:

• Conduct cyber risk assessments required by regulation to identify and evaluate risks and mitigating controls.
• Maintain a cyber risk register aligned with enterprise risks.
• Support cyber risk processes such as risk classifications and risk deep dives.
• Support the maintenance, review, and publication of cyber security policies in alignment with the NIST 2.0 Framework.
• Engage with Compliance teams to ensure delivery of required regulatory activities (DORA).
• Help develop and deliver cyber security trainings for employees and contractors.
• Enhance the training and awareness program to support organization-wide awareness of cyber security threats, trends, and best practices.

Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, or a related field (or equivalent experience).
• 3–5 years of experience in cybersecurity, cyber risk, or governance functions.
• Strong understanding of cyber risk frameworks (e.g., NIST CSF).
• Experience with regulatory engagement (e.g., GDPR, DORA, SEC guidelines).
• Proficiency in risk identification, assessment, and reporting.
• Excellent communication skills to effectively train and raise awareness at all organizational levels.

Preferred Skills:

• Experience in private equity, asset management, or financial services industries.
• Familiarity with tools like GRC platforms (e.g., Archer, ServiceNow).
• Certification(s) such as CISSP, CISM, CRISC, or CGEIT.