Cybersecurity Risk Analyst

Cybersecurity Risk Analyst focuses on supporting a technology vendor management program, ensuring technology risk reviews across multiple disciplines, and monitoring for renewals and savings opportunities.

What the role involves

• Supporting a Technology Vendor Management program, ensuring technology risk reviews across multiple disciplines, and monitoring for renewals and savings opportunities.
• Partner with business groups to review workflows, producing output to enhance security processes in support of those workflows.
• Ensure the security considerations identified are implemented and solutions are configured securely.
• Deliver key security metrics to ensure technical security controls meet desired objectives.
• Coordinating with IRM leadership to develop.
• Ensuring the measurable effectiveness of CAA’s technical controls.

Skills and requirements

• At least 3+ years' experience in Information Technology.
• A bachelor’s or master’s Degree in a relevant field of work.
• Strong analytical skills in conducting due diligence to identify, assess and prioritise vendor risks.
• Familiarity with information security frameworks (NIST, ISO27001), data privacy regulations (GDPR, CCPA), and information security certifications/attestations (SOC, ISO, PCIDSS, Fe.