Cyber Security Business Analyst (Risk Management Analyst)

Job Summary

We are seeking an experienced Cybersecurity Analyst to analyze business processes and collaborate with technology teams to design and implement secure, enterprise-wide information technology solutions. This role focuses on strengthening the organization s cybersecurity posture by developing policies, managing risk, ensuring regulatory compliance, and leading incident response efforts. The ideal candidate brings strong analytical skills, deep cybersecurity expertise, and the ability to partner effectively with both technical and business stakeholders.

Key Responsibilities

• Develop, implement, and maintain enterprise-wide cybersecurity policies, standards, and procedures aligned with business goals
• Conduct and oversee cybersecurity risk assessments and actively manage organizational risk posture
• Ensure compliance with regulatory and industry frameworks such as SOC 2, ISO 27001, NIST, and other applicable standards
• Monitor security infrastructure and respond to security incidents, vulnerabilities, and breaches
• Lead incident response activities and coordinate remediation efforts with IT and business teams
• Manage and optimize security tools including firewalls, SIEM platforms, endpoint protection, and identity/access controls
• Support and participate in security audits, vulnerability assessments, and penetration testing initiatives
• Track, analyze, and report cybersecurity metrics and KPIs to senior leadership
• Manage third-party vendor security assessments, reviews, and contractual security requirements
• Collaborate with business units to embed security best practices into daily operations and project lifecycles
• Act as the subject matter expert for cybersecurity-related inquiries and initiatives

Required Qualifications

• Bachelor s degree in Cybersecurity, Information Technology, Computer Science, or a related field
• 5 years of experience in cybersecurity, information security, or risk management roles
• Strong knowledge of security frameworks, threat landscapes, and enterprise business operations
• Hands-on experience with security monitoring, incident response, and risk management

Preferred Qualifications

• Professional cybersecurity certifications such as CISSP, CISM, CISA, or equivalent
• Experience working in regulated environments or large enterprise organizations
• Strong communication skills with the ability to translate technical risk into business impact