<h5 class="iCIMS_Header">
Cyber Risk Analyst II / Risk Analyst II</h5>



Job Locations

US-RI-Providence | US-OH-Cleveland | US-OH-Columbus | US-NY-Albany | US-FL-Jacksonville | US-WI-Milwaukee | US-FL-Orlando | US-AZ-Phoenix | US-PA-Pittsburgh | US-VA-Richmond | US-TX-San Antonio | ...






Requisition ID

2024-9154



Category

Information Technology


































<h5 class="iCIMS_InfoMsg iCIMS_InfoField_Job">



Overview


</h5>






The Cyber Risk Analyst assists in enhancing our information security, information governance, privacy, compliance, and risk management procedures. This role will work with the GRC Manager and other team members to identify flaws and vulnerabilities in business and customer security systems to proactively develop solutions.









<h5 class="iCIMS_InfoMsg iCIMS_InfoField_Job">



Responsibilities


</h5>






<ul> Collaborates with business and engineering executives to identify and enhance existing control processes <li>Evaluates internal control improvement opportunities </li><li>Administers audit and security GRC tools, such as ServiceNow, to document, maintain, and enhance controls </li><li>Administers third party risk management tools such as Bitsight </li><li>Maintains knowledge of key NIST controls and enhances IT controls and policies accordingly </li><li>Manages and maintains the controls of the IT audit program </li><li>Prepares team members and necessary materials for audit meetings (e.g., control design walkthroughs), follow-up requests, and testing </li><li>Coordinates testing and validation of IT General Control (ITGC) processes for internal audit </li><li>Reviews auditor requests to ensure they are appropriately scoped and reasonable, and reviews the completeness and accuracy of audit evidence and materials provided by internal team members prior to auditor submission </li><li>Partners with senior IT leaders to ensure team member accountability for completing audit assignments on time with the appropriate level of priority, thoroughness, and accuracy, according to documented procedures </li><li>Identifies and ranks the inventory of third parties that pose a risk to the organization </li><li>Collects the necessary security and auditing information from third parties, analyzes, and recommends its implementation as a control </li><li>Oversees the maturation of the third party risk management program through the development of standard operating procedures </li><li>Contributes to the design, creation, and maintenance of risk-based metrics </li><li>Leads projects independently, coordinates efforts with all team members, and ensures proper management communication and project success through completion </li></ul>









<h5 class="iCIMS_InfoMsg iCIMS_InfoField_Job">



Qualifications


</h5>






KEY COMPETENCIES <ul> <li>Communicate Effectively - Listen to understand and clearly convey information in all forms based on the audience to ensure shared meaning of the message. </li> <li>Act Inclusively - Ensure that actions and behaviors are respectful; show empathy and treat others with dignity. Leverage capabilities and insights of individuals with diverse perspectives, abilities and motivation. </li> <li>Solve Problems - Identify, prioritize and implement alternatives for a solution. </li> <li>Demonstrate Agility/Adaptability - Maintain effectiveness and adjust to change by exploring the rationale, trying new approaches, and collaborating with others to make the change successful. Create an atmosphere of open-mindedness to change. </li> <li>Drive for Results - Show passion and commitment while delivering on business outcomes. Create a sense of individual ownership and accountability. </li> <li>Champion Innovation - Identify opportunities for new and improved ways of doing things that result in value added, unique and differentiated solutions. </li> </ul>EDUCATION <ul> <li>Bachelor's degree in computer science or a related field </li><li>3+ years' experience in governance, risk, and compliance and/or information security or audit </li></ul> KNOWLEDGE, SKILLS & ABILITIES <ul> <li>Advanced knowledge and understanding of NIST Cybersecurity Framework and NIST SP 800-53 controls </li><li>Expertise in complex business processes and technological risks </li><li>Deep understanding of security technologies including firewalls, proxies, SIEM, IDPs, and antivirus software </li><li>Knowledge of penetration testing, network security, and common techniques to expose and correct security flaws </li><li>Advanced understanding of third-party risk management </li><li>Prior experience with third-party GRC and vendor management platforms </li><li>Superior verbal and written communication skills with technical and non-technical audiences at all organizational levels </li><li>Passion and dedication for improving security and compliance maturity in a significant way </li><li>Prior knowledge of NIST Special Publications 800-53 and 800-171 is preferred </li></ul> Salary to be determined by the education, experience, knowledge, skills, and abilities of the applicant, internal equity, and alignment with market data. For Providence, RI this ranges from $79,000.00 - $110,000.00 plus benefits and retirement program. For Arlington, VA and Boston, MA this ranges from $88,000.00- $120,000.00 plus benefits and retirement program. Gilbane offers an excellent total compensation package which includes competitive health and welfare benefits and a generous profit-sharing/401k plan. We invest in our employees' education and have built Gilbane University into a top training organization in the construction industry. Qualified applicants who are offered a position must pass a pre-employment substance abuse test. Gilbane is an Affirmative Action/Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to age, color, national origin, race, religion, sex, sexual orientation, gender identity, protected veteran status, or disability status. Note to Recruiters, Placement Agencies, and Similar Organizations: Gilbane does not accept unsolicited resumes from agencies. Please do not forward unsolicited agency resumes to our jobs alias, website, or to any Gilbane employee. Gilbane will not pay fees to any third party agency or firm and will not be responsible for any agency fees associated with unsolicited resumes. Unsolicited resumes received will be considered property of Gilbane and will be processed accordingly. 













<h5 class="iCIMS_SubHeader iCIMS_SubHeader_Connect">
Need help finding the right job?
</h5>



We can recommend jobs specifically for you!

Click here to get started.

**Overview** As we celebrate our Centennial year, we invite you to join us in shaping the next century of impact. Be a relentless force for a world of longer, healthier lives as we remain devoted to a future of health and hope for everyone, everywhere. At the American Heart Association, your contribution matters, and so does your career. The **American Heart Association** has an excellent opportunity for a **Sr. Cyber Risk Analyst** in our **National Center** office located in **Dallas, TX. (Home-based work available)** The Business Technology (BT) Sr. Cyber Risk Analyst is responsible for risk identification and management across the BT department and the overall American Heart Association organization. This position will support the BT Risk Manager in the management and administration of the Cyber/Risk Management program and Governance Risk and Compliance (GRC) processes and tools. . The primary goal of the BT Risk Management team is to protect the confidentiality, integrity, and availability of American Heart Association 's data. The Sr. Cyber Security Risk Analyst will partner with all appropriate parties which includes, but is not limited to: other departments, service providers, application service providers, technology staff, etc. to help ensure risks are managed appropriately to support the BT Risk Management needs of the American Heart Association. The Association offers many resources to help you maintain work-life harmonization through your changing needs and life situations. To help you be successful, you will have access to Heart U, our award-winning corporate university, as well as additional training and support, locally. #TheAHALife is our company culture, our way of life, reflecting our diversity, equity & inclusion, our focus on work-life harmonization and our Guiding Values. Discover why you will Be Seen. Be Heard. Be Valued at the American Heart Association by following us on LinkedIn, Instagram, Facebook, X (formerly Twitter), and at heart.jobs. **Responsibilities** + Active participation in developing and implementing strategic initiatives for the Cyber Risk Management Program (CRMP). Apply quantitative risk valuation models and tooling to inform and support strategic and tactical risk-based decisions. + Enhance Vendor Security Assessment process by collaborating with business and technology stakeholders. Maintain security scorecards and metrics from vendors, corporate functions and affiliated offices. Communicates technical issues to diverse audiences and have knowledge and/or experience in application and infrastructure security, public cloud. + Review and analyzes statistics of network events and system performance to locate and recommend remediation and lead strategies for discovered vulnerabilities. + Assist and partner with the Affiliates on annual PCI Data Security Certification Process. + Support and administer the Governance Risk and Compliance (GRC) Tool surrouding data mapping, cookie consent, privacy consent, third pary risk management and overall risk management. + Will be point of contact to coordinate Technical incident response. Support incident response efforts and conduct post-incident analysis to identify areas for improvement. + Assist project teams in the implementation of security measures to meet corporate security policies, manage risk, and meet external regulations, including various data security standards. + Weight business needs against security concerns and articulate issues and options to management. Research and assess new threats and security alerts and recommend remedial action. + Ensures of proper documentation of technology assessment results, and monitors remediation. Deliver all documentation developed during task execution, with status of all work in progress. Create Weekly and Monthly Status Reports, including daily technical task reports, threat management reports, among others. + Support the Business Technology Disaster Recovery process **Want to help get your resume to the top? Take a look at the experience we require:** **Qualifications** + Bachelor's degree in one of the following areas: Computer Sciences, Computer Engineering, Information Assurance, Information Security and/or Risk Management. + At least 6 years of experience applying information security controls methods, processes and risk management best practices in a Global-International forum. + Proven experience in succesffully implementing PCI DSS framework. + Strong technical information security knowledge to assess various information security and risk management processes and tools. + Experience with Security Controls frameworks (e.g. CobIT, ISO 27001, NIST, PCI DSS, RMF, among others) and knowledge of privacy regulations (e.g. GDPR, CPRA, CPA, etc.) + Able to work effectively in an environment characterized by multi-tasking, fast-paced, lead by multiple projects and conflicting priorities. Multi-level communications and interpersonal skills (including strong documentation skills). Able to effectively communicate security-related concepts to a broad range of technical and non-technical staff; across IT and business. + Information Security Certification(s) preferred, which may include, but is not limited to: CEH, CISSP, PCI ISA, among others **Compensation & Benefits** Expected pay range will be $80,000- $95,000. Pay is commensurate with experience; geographic differentials to the pay range may apply. The American Heart Association reserves the right to pay more or less than the posted range. The American Heart Association invests in its people. Here are the main components of our total rewards package. Visit Rewards & Benefits to see more details. + **Compensation** Our goal is to ensure you have a competitive base salary. Thats why we regularly review the market value of jobs and make adjustments, as needed. + **Performance and Recognition** You are rewarded for achieving success by merit increases and incentive programs, based on the type of position. + **Benefits** We offer a wide array of benefits including medical, dental, vision, disability, and life insurance, along with a robust retirement program that includes an employer match and automatic contribution. As a mark of our commitment to employee well-being, we also offer an employee assistance program, employee wellness program and telemedicine, and medical consultation. + **Professional Development ** You can join one of our many Employee Resource Groups (ERG) or be a mentor/mentee in our professional mentoring program. HeartU is the Associations national online university, with more than 100,000 resources designed to meet your needs and busy schedule. + **Work-Life Harmonization ** The Association offers Paid Time Off (PTO) at a minimum of 16 days per year for new employees. The number of days will increase based on seniority level. You will also have a total of 12 paid holidays off each year, which includes several days off at the end of the year. + **Tuition Assistance** - We support the career development of all employees. This program provides financial assistance to employees who wish to further their education and career in relation to their current duties and responsibilities, or for potential future positions in the organization. The American Heart Associations 2024 Goal: Every person deserves the opportunity for a full, healthy life. As champions for health equity, by 2024, the American Heart Association will advance cardiovascular health for all, including identifying and removing barriers to health care access and quality. **At American Heart Association | American Stroke Association, our mission is to be a relentless force for a world of longer, healthier lives, regardless of race, ethnicity, gender, gender identity, religion, age, language, sexual orientation, national origin and physical or cognitive abilities. We're committed to ensuring our workforce, workplace culture and mission have a shared impact across a diverse set of backgrounds.** **This position not a match with your skills?** Click here to see other opportunities. EOE/Protected Veterans/Persons with Disabilities **Join our Talent Community!** Join our Talent Community to receive updates on new opportunities and future events. **Posted Date** _3 months ago_ _(4/29/2024 1:20 PM)_ **_Requisition ID_** _2024-13159_ **_Job Category_** _Information Technology_ **_Position Type_** _Full Time_

<h3>Job Description</h3><div>Job Description<div>Summary:Serves as a liaison between the Information Security Office and various department executives. Responsible for identifying, testing existing controls and understand where controls need to be within processes as indicated with technology frameworks and applicable regulations (i.e., ISO, NIST, FFIEC, FDIC, etc.). Gap analysis, project tracking and executive reporting will be a critical function of this role. Qualifications:Education: Bachelor's Degree in information systems or related field or equivalent combination of education and experience/training.Licenses/Certifications: Valid Ohio's Driver's License.Experience: Three years of combined experience in requirements development, operations analysis, business management consulting, project management, testing controls or enterprise risk management. Essential Functions: Job Specific:<ul><li>Analyze, assess and document business requirements in an unambiguous and clear manner to support the business.</li><li>Identify controls, or opportunities, based on technical frameworks (i.e., ISO, NIST, etc.)</li><li>Catalogue, test and monitor controls. </li><li>Create and perform gap analysis as well as provide strategy to implement and mitigate identified risks. </li><li>Define business architecture and functional design.</li><li>Manage projects, develop project plans, and monitor performance.</li><li>Monitor deliverables and ensure timely completion of projects.</li><li>Conduct meetings and presentations to share ideas and findings.</li><li>Conduct functional walk-throughs with various stakeholders.</li><li>Analyze system impacts to other systems and procedures.</li><li>Participate in training personnel on enhancements, and new systems or procedures.</li><li>Creating executive reporting and strategy documents.</li></ul>Knowledge/Skills/Abilities:<ul><li>Excellent verbal and written communications at both business and deep technical levels.</li><li>Advanced knowledge of multiple end-to-end systems development life cycles.</li><li>Strong understanding of and experience with process improvement and process mapping.</li><li>Strong understanding and experience with creating complex process flows with control points via Visio Pro. </li><li>Identifying and testing controls. </li><li>Strong understanding of ISO, NIST, FFIEC and other control frameworks. </li><li>Strong understanding and experience of enterprise risk management. </li><li>Strong leadership skills, dependable, curious, matrix-oriented, a visionary, solution oriented, delivers exemplary customer service and quality focused.</li><li>Excellent interpersonal skills.</li><li>Strong knowledge of the business area that is being supported.</li><li>Self-directed and motivated.</li><li>The ability to manage multiple tasks.</li><li>Excellent problem-solving skills.</li><li>Technical writing.</li><li>Ability to read and comprehend instructions, correspondence, technical manuals and memos.</li><li>Ability to respond to common inquiries or complaints from employees, vendors and management staff.</li><li>Ability to effectively present information to individuals one-on-one or a small group setting.</li><li>Ability to articulate technical concepts to end-users.</li><li>Good skills and knowledge of facilitation, situational awareness, conflict resolution, continual improvement, and empowerment.</li><li>Project Management skills.</li><li>Understanding of FinTech industry.</li></ul>Sutton Bank is an Equal Employment Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, sexual orientation, gender identity, disability or protected veteran status. Job Posted by ApplicantPro </div></div>

Risk Analyst Jobs in Columbus, OH

Cyber Risk Analyst Ii Risk Analyst Ii
July 24, 2024

Sr Cyber Risk Analyst
July 24, 2024

Sr Cyber Risk Analyst
July 18, 2024

Information Security Risk Analyst
July 17, 2024

Sr Cyber Risk Analyst
July 16, 2024

Security And Risk Analyst
July 16, 2024

Cyber Risk Analyst Ii Risk Analyst Ii
July 16, 2024

Cyber Risk Analyst Ii Risk Analyst Ii
July 1, 2024

Quick filters

Top companies

Risk Analyst Jobs in Columbus, OH

Cyber Risk Analyst Ii Risk Analyst IiJuly 24, 2024

Sr Cyber Risk AnalystJuly 24, 2024

Sr Cyber Risk AnalystJuly 18, 2024

Information Security Risk AnalystJuly 17, 2024

Sr Cyber Risk AnalystJuly 16, 2024

Security And Risk AnalystJuly 16, 2024

Cyber Risk Analyst Ii Risk Analyst IiJuly 16, 2024

Cyber Risk Analyst Ii Risk Analyst IiJuly 1, 2024