What are the responsibilities and job description for the Technology & Cybersecurity Risk Management Analyst position at Appathon.Ai?
About The Role
Upslea is seeking a Technology & Cybersecurity Risk Management Analyst to support enterprise technology and cybersecurity risk management initiatives.
In this role, you will assess technology and cybersecurity risks, evaluate security controls, support remediation activities, and develop risk reporting and governance materials. You will work closely with cybersecurity, technology, business, and control owners across the organization.
Key Responsibilities
A detail-oriented cybersecurity or technology risk professional who can clearly communicate risks, control gaps, and remediation requirements while maintaining accurate documentation and supporting multiple initiatives.
Equal Employment Opportunity
Upslea is an Equal Employment Opportunity (EEO) employer. We are committed to providing equal employment opportunities to all qualified applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by applicable law.
Upslea is seeking a Technology & Cybersecurity Risk Management Analyst to support enterprise technology and cybersecurity risk management initiatives.
In this role, you will assess technology and cybersecurity risks, evaluate security controls, support remediation activities, and develop risk reporting and governance materials. You will work closely with cybersecurity, technology, business, and control owners across the organization.
Key Responsibilities
- Conduct technology and cybersecurity risk assessments and stakeholder discussions.
- Identify, document, and monitor technology and cybersecurity risks.
- Evaluate security controls and map risks to controls, policies, and frameworks.
- Support control walkthroughs and risk assessments with control owners.
- Document risks, findings, evidence, and assessment results.
- Track remediation activities and escalate overdue or significant risk issues.
- Maintain risk information within GRC and risk management tools.
- Prepare risk reports, dashboards, and presentations for leadership.
- Communicate cybersecurity risks to technical and non-technical stakeholders.
- Support continuous improvement of risk management and governance processes.
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Business, or related field, or equivalent experience.
- 1–3 years of experience in cybersecurity, IT risk, technology risk, compliance, or governance.
- Understanding of cybersecurity principles, controls, risk assessment, and risk mitigation.
- Knowledge of NIST, COBIT, and ISO 27001.
- Strong analytical, organizational, documentation, and communication skills.
- Ability to manage multiple stakeholders and priorities.
- ServiceNow
- Microsoft Excel, PowerPoint, and Word
- Microsoft Copilot
- GRC / Risk Management tools
- NIST, COBIT, and ISO 27001
A detail-oriented cybersecurity or technology risk professional who can clearly communicate risks, control gaps, and remediation requirements while maintaining accurate documentation and supporting multiple initiatives.
Equal Employment Opportunity
Upslea is an Equal Employment Opportunity (EEO) employer. We are committed to providing equal employment opportunities to all qualified applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by applicable law.