Cyber Security Analyst

Job Title: Cyber Security Risk Analyst.

Location: Brooklyn, NYC.

Job Type: Contract.

THIS POSITION IS NOT OPEN TO AGENCIES.

Position Overview

The Cyber Security Risk Analyst supports enterprise governance, risk, and compliance (GRC) initiatives by strengthening cyber risk management practices, enhancing third-party risk oversight, and contributing to cybersecurity governance across a complex organizational environment. This role works closely with cybersecurity leadership, internal stakeholders, and partner teams to mature risk assessment processes and ensure consistent, well-documented risk management activities.

Key Responsibilities

• Design, develop, and enhance cybersecurity risk management processes and supporting frameworks
• Support enterprise cyber risk governance, including risk identification, evaluation, and remediation tracking
• Perform cybersecurity risk assessments in collaboration with business and IT stakeholders
• Evaluate and manage third-party and vendor cybersecurity risk throughout the vendor lifecycle
• Contribute to the development and maintenance of a third-party risk register
• Review and analyze cybersecurity risk cases, exceptions, and justifications
• Document risks, mitigations, and remediation actions within a centralized risk register
• Assist in developing risk assessment procedures, methodologies, and testing approaches aligned with industry frameworks
• Collaborate with cross-functional teams and subject matter experts to gather risk intelligence
• Support remediation efforts by helping initiate corrective actions where vulnerabilities or weaknesses are identified
• Participate in special cybersecurity initiatives and projects as assigned

Required Qualifications

• Minimum of 4 years of experience in one or more of the following areas:
• Cybersecurity risk management
• Cybersecurity risk assessment
• Third-party or vendor risk management within a cybersecurity function
• Strong understanding of GRC concepts and the cyber risk lifecycle
• Experience working in large, complex, multi-stakeholder environments
• Strong analytical, investigative, and documentation skills
• Excellent written and verbal communication skills

Preferred Qualifications

• Bachelor’s degree in Cybersecurity, Risk Management, Information Systems, Computer Science, or a related field
• Familiarity with one or more cybersecurity frameworks or standards, including:
• NIST
• ISO/IEC 27001 / 27002
• CIS
• SANS
• PCI
• Relevant certifications are a plus, including but not limited to:
• CISSP, CISM, CRISC, CISA
• CompTIA Security , CySA , Network
• GIAC certifications
• Knowledge of cybersecurity laws, regulations, and data privacy principles
• Ability to work independently in a self-directed and organized manner

About Buchanan Technologies

Since Buchanan’s inception over 30 years ago, we have operated on 5 core values – People Matter, Customers Matter, Principles Matter, Community Matters, and Every Interaction Matters. These values are represented across each facet of the company, from employee relations to client service delivery to corporate social responsibility initiatives and beyond.

Why Work at Buchanan?

At Buchanan Technologies, we offer a great employment experience with a fun but professional work environment, competitive salary, and various employee career advancement programs that add value to your skills and daily life. If you are excited about being part of an energetic team where your contributions are appreciated and hard work is recognized, Buchanan is the place for you.

Things We Are Passionate About

We are passionate about providing top-tier technology services to our customers and clients and fostering a culture of continuous learning for our employees. We are a people- centric company, focused on growth and diversity for our workforce. Come join us and let’s build something amazing together.

Follow Us:

LinkedIn: https://www.linkedin.com/company/buchanan-technologies/

Website: www.buchanan.com

Buchanan Technologies provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or genetics. In addition to federal law requirements, Buchanan Technologies complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.