Technology & Cybersecurity Risk Management Analyst

Technology & Cybersecurity Risk Management Analyst

Plano, TX 75024 - 100% Onsite Role

6-12 Months Contract (Long-Term Contract Potential for Conversion)

1 Opening

Notes: No sponsorship or visa transfer available. Candidates must be authorized to work in the U.S. without current or future sponsorship.

Position Summary:

We are seeking a Technology & Cybersecurity Risk Management Analyst to support enterprise technology and cybersecurity risk management initiatives.

This role will focus on identifying, assessing, documenting, and monitoring technology and cybersecurity risks while working closely with control owners and business stakeholders. The successful candidate will conduct risk assessments, evaluate security controls, support remediation activities, and develop risk reporting and governance materials.

The ideal candidate has foundational experience in cybersecurity, technology risk, IT risk, compliance, or governance, with knowledge of frameworks such as NIST, COBIT, and ISO 27001.

Key Responsibilities:

• Technology & Cybersecurity Risk Management

o Conduct risk intake, assessments, triage sessions, and stakeholder risk discussions.

o Assess technology and cybersecurity risks using NIST, COBIT, and ISO 27001 frameworks.

o Identify, document, and evaluate inherent, residual, and emerging technology risks.

o Review security controls and assess their effectiveness in mitigating identified risks.

o Map risks to controls, policies, and applicable framework requirements.

o Facilitate control walkthroughs and risk discussions with control owners and stakeholders.

• Risk Documentation & Remediation

o Document risk statements, controls, evidence, and assessment results.

o Develop risk treatment and mitigation recommendations.

o Track remediation activities and action items through closure.

o Escalate overdue actions, unresolved risks, and significant control or compliance concerns.

o Maintain accurate and complete risk records within governance and risk management tools.

• Reporting & Stakeholder Support

o Develop executive-ready risk reports, dashboards, and governance presentations.

o Communicate technology and cybersecurity risks to technical and non-technical stakeholders.

o Coordinate risk activities across multiple stakeholders and concurrent initiatives.

o Identify opportunities to improve and streamline risk management processes.

Required Qualifications:

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field, or equivalent professional experience.

• 1-3 years of experience in Cybersecurity, Technology Risk Management, IT Risk, Compliance, Governance, or a related discipline.

• Foundational understanding of cybersecurity principles, security controls, threats, and risk assessment methodologies.

• Knowledge of NIST, COBIT, and ISO 27001 frameworks.

• Understanding of control design, control effectiveness, and risk mitigation concepts.

• Experience supporting projects or initiatives involving multiple stakeholders.

• Strong analytical, organizational, and project coordination skills.

• Strong written and verbal communication skills.

• Ability to clearly document risks, controls, findings, and recommendations.

Tools & Technology:

• ServiceNow

• Microsoft Excel

• Microsoft PowerPoint

• Microsoft Word

• Microsoft Copilot

• Governance, Risk & Compliance (GRC) tools

• NIST

• COBIT

• ISO 27001

Ideal Candidate:

The ideal candidate is a detail-oriented cybersecurity or technology risk professional who is comfortable working with control owners and stakeholders across technical and business teams. Strong candidates will be able to clearly articulate technology risks, controls, control gaps, and remediation requirements while maintaining high-quality documentation and supporting multiple risk initiatives simultaneously.

If you possess these qualifications and are excited about the prospect of contributing to dynamic team, we encourage you to apply.