Cybersecurity Risk Management Analyst

Please note that this is a contract role providing services to Hilton through Talent Solutions. If you are selected for this role, you will be employed by Talent Solutions and will not be an employee of Hilton. Contract workers are not employees of Hilton or any of its subsidiaries, nor will they be eligible for Hilton benefits.

***US based remote role with a preferred candidate in EST/CST***

In addition, travel to the McLean office may be required (approximately 3 times over the course of the year)

Job Summary:

This is an exciting opportunity to join a dynamic and globally focused cybersecurity team within one of the world's most recognized hospitality brands. The ideal candidate will play a critical role in identifying, assessing, and managing cyber risks across the enterprise, ensuring that the organization's risk posture is accurately reflected and effectively communicated to stakeholders at all levels. This role requires a detail-oriented, process-driven professional who can seamlessly navigate a fast-paced environment, manage multiple priorities simultaneously, and collaborate cross-functionally with business and IT teams to drive meaningful risk reduction outcomes. The successful candidate will bring a well-rounded understanding of cybersecurity principles and risk management frameworks, along with the ability to quickly acclimate to established processes and contribute to the team's operational continuity and effectiveness.

Responsibilities:
- Review and update cyber risk reports to ensure consistency in format, quality, and content
- Assess the business impact of identified security issues and calculate issue-level and overall risk ratings
- Ensure risk assessments accurately reflect the organization's current exposure and risk posture
- Manage the end-to-end cyber issue management lifecycle, including risk-based tracking, follow-up, and validation activities
- Coordinate with business and IT teams to obtain remediation updates and evaluate supporting evidence
- Determine when issues have been sufficiently addressed for closure based on established governance standards
- Evaluate security issues identified outside of standard cyber review processes through bespoke risk assessments
- Perform qualitative and quantitative risk analyses by determining likelihood, impact, and overall risk scores
- Develop executive-level risk summaries and mitigation recommendations in partnership with business and IT stakeholders
- Review and validate third-party cyber due diligence assessments to ensure scoring accuracy and consistency with vendor responses
- Initiate cyber due diligence attestations for critical Tier 1 vendors and collaborate with Supply Management, business owners, and IT teams to gather required service details
- Maintain current and accurate vendor contact information within the third-party risk management program
- Assist in developing ad hoc cyber risk reports and executive presentations to support leadership decision-making
- Maintain the enterprise risk oversight platform by collaborating with control owners to assess control maturity and monitor risk posture
- Ensure enterprise risk information remains accurate, current, and aligned with organizational governance standards

Skills:
- Strong understanding of cybersecurity principles, frameworks, and risk management methodologies
- Ability to perform both qualitative and quantitative risk analyses, including likelihood and impact assessments
- Demonstrated ability to manage multiple priorities and tasks simultaneously while maintaining accuracy and meeting deadlines
- Excellent attention to detail with a process-oriented mindset
- Strong written and verbal communication skills, including the ability to develop clear and concise executive-level presentations and reports
- Ability to work effectively and collaboratively across functions with business, IT, and third-party stakeholders
- Experience evaluating remediation evidence and making risk-based closure determinations
- Familiarity with third-party cyber risk management practices and vendor due diligence processes
- Ability to quickly acclimate to new environments, tools, and processes
- Strong analytical and critical thinking skills with the ability to accurately document and communicate complex risk information

Experience:
- Prior experience in a cybersecurity risk management, information security, or related role is required
- Hands-on experience conducting or supporting cyber risk assessments, including issue lifecycle management
- Experience working with enterprise risk management platforms or governance, risk, and compliance tools
- Demonstrated experience collaborating with cross-functional teams including IT, business units, and third-party vendors
- Experience developing risk reports or presentations for senior leadership or executive audiences is preferred
- Background in third-party or vendor cyber risk management is a plus

Qualifications:
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent work experience preferred
- Relevant industry certifications such as Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), or CompTIA Security are preferred

This is a rare opportunity to contribute to the cybersecurity mission of a globally recognized leader in the hospitality industry, working alongside a talented and collaborative team that is shaping the future of secure, innovative guest experiences. With a global scope and high visibility across the enterprise, this role offers meaningful work that directly supports the protection of one of the most trusted brands in the world, making it an exceptional opportunity for a cybersecurity professional looking to make a lasting impact.