Job DescriptionThe IT risk analyst supports the IT risk management practice, which ensures risk is proactively identified, decisioned, communicated and monitored. The primary responsibilities of the IT risk analyst are to perform assessments of potential risk exposures and prepare actionable risk reporting. In this role, it is critical to foster strong working relationships with leaders in other areas of the enterprise to perform evaluations of the enterprise risk posture and to offer independent advice regarding ways to reduce risk in line with established risk appetites. The successful candidate thinks strategically, is intellectually curious and is comfortable working in undefined problem spaces. As a member of a growing enterprise, the IT risk analyst will be expected to shape and further refine the risk program and will have the opportunity to operate with both autonomy and empowerment from senior leadership. Top Must Haves:<ul><li>Risk management experience: previous experience working and reviewing cyber risk assessments</li><li>Familiarity with cyber security frameworks, such as, NIST-CSF</li><li>Experience with risk tools (administrative, power user, user)</li><li>Facilitate cyber risk communications, cyber risk lifecycle task completion and cyber risk aware decision making with technical and non-technical audiences</li></ul> Key ResponsibilitiesCRA Responsibilities:<ul><li>Managing cyber risk assessments</li><li>Evaluating internal Company’s operational controls for alignment to cyber risk treatment needs.</li><li>Analyzing, framing, and updating threat and risk scenarios for use in cyber risk management</li><li>Communicating cyber risk to Management and designated stakeholders.</li><li>Assess and update cyber risk appetites for LOB.</li><li>Evaluate cyber risk treatment options and facilitate communication with stakeholders.</li><li>Training employees in cyber risk awareness and risk first culture.</li><li>Adjust cyber risk scores based on available controls and treatment options.</li><li>Create cyber risk dashboards/reports based on complex risk, process and control relationships.</li><li>Facilitate risk management oversight in supporting internal/external audits and regulatory exams.</li></ul> CRA Requirements:<ul><li>Prefer 5-10 years’ experience in governance, risk, and compliance</li><li>Job field related certification(s), CISSP/CISA/CRISC (preferred but not required)</li><li>Previous experience as a compliance analyst in a related field.</li><li>In-depth knowledge of industry compliance requirements and standards.</li><li>Proficiency in compliance management software, Archer, ServiceNow, MetricStream, etc.</li><li>Ability to accurately complete applications for compliance certification.</li><li>Ability to effectively train employees.</li><li>Exceptional communication and interpersonal skills.</li><li>Understanding of regulatory frameworks</li><li>Requirements analysis</li><li>Ability to develop standards to maintain legal compliance</li><li>Quality management</li><li>Critical thinking and problem-solving skills</li><li>Organization, project management, and strategic planning skills</li><li>Familiarity with process improvement methodology</li><li>Attention to detail</li><li>Ability to embrace complexity</li></ul>

Ready to grow your career? We should talk.

We seek a Cyber Risk Analyst for a contract-to-hire opportunity with one of our top-tier Cincinnati clients. This role is a Remote. To be successful in this role, you should have experience with Risk management.

Job Description

The IT risk analyst supports the IT risk management practice, which ensures risk is proactively identified, decisioned, communicated and monitored. The primary responsibilities of the IT risk analyst are to perform assessments of potential risk exposures and prepare actionable risk reporting. In this role, it is critical to foster strong working relationships with leaders in other areas of the enterprise to perform evaluations of the enterprise risk posture and to offer independent advice regarding ways to reduce risk in line with established risk appetites.
The successful candidate thinks strategically, is intellectually curious and is comfortable working in undefined problem spaces. As a member of a growing enterprise, the IT risk analyst will be expected to shape and further refine the risk program and will have the opportunity to operate with both autonomy and empowerment from senior leadership.

Top Must Haves:
Risk management experience: previous experience working and reviewing cyber risk assessments
Familiarity with cyber security frameworks, such as, NIST-CSF
Experience with risk tools (administrative, power user, user)
Facilitate cyber risk communications, cyber risk lifecycle task completion and cyber risk aware decision making with technical and non-technical audiences

Key Responsibilities

Managing cyber risk assessments
Evaluating internal operational controls for alignment to cyber risk treatment needs.
Analyzing, framing, and updating threat and risk scenarios for use in cyber risk management
Communicating cyber risk to Management and designated stakeholders.
Assess and update cyber risk appetites for LOB.
Evaluate cyber risk treatment options and facilitate communication to stakeholders.
Training employees on cyber risk aware and risk first culture.
Adjust cyber risk scores based on available controls and treatment options.
Create cyber risk dashboards/reports based on complex risk, process and control relationships.
Facilitate risk management oversight in supporting internal/external audits and regulatory exams.

CRA Requirements:

Prefer 5-10 years experience in governance, risk, and compliance
Job field related certification(s), CISSP/CISA/CRISC (preferred but not required)
Previous experience as a compliance analyst in a related field.
In-depth knowledge of industry compliance requirements and standards.
Proficiency in compliance management software, Archer, ServiceNow, MetricStream, etc.
Ability to accurately complete applications for compliance certification.
Ability to effectively train employees.
Exceptional communication and interpersonal skills.
Understanding of regulatory frameworks
Requirements analysis
Ability to develop standards to maintain legal compliance
Quality management
Critical thinking and problem-solving skills
Organization, project management, and strategic planning skills
Familiarity with process improvement methodology
Attention to detail
Ability to embrace complexity

About Golden Technology:
Welcome to Golden Technology, an IT staffing company based in Cincinnati, OH. We are a faith-based organization dedicated to developing people and driving innovation. At Golden Technology, we believe in the power of community, the importance of integrity, and the potential within each individual. Our mission is to connect top talent with exciting opportunities, fostering growth and success for both our clients and candidates. Join us and be part of a team that values excellence, supports personal development, and is committed to making a positive impact in the world of technology.

The IT risk analyst supports the IT risk management practice, which ensures risk is proactively identified, decisioned, communicated and monitored. The primary responsibilities of the IT risk analyst are to perform assessments of potential risk exposures and prepare actionable risk reporting. In this role, it is critical to foster strong working relationships with leaders in other areas of the enterprise to perform evaluations of the enterprise risk posture and to offer independent advice regarding ways to reduce risk in line with established risk appetites. The successful candidate thinks strategically, is intellectually curious and is comfortable working in undefined problem spaces. As a member of a growing enterprise, the IT risk analyst will be expected to shape and further refine the risk program and will have the opportunity to operate with both autonomy and empowerment from senior leadership. Top Must Haves: <ul> <li>Risk management experience: previous experience working and reviewing cyber risk assessments </li><li>Familiarity with cyber security frameworks, such as, NIST-CSF </li><li>Experience with risk tools (administrative, power user, user) </li><li>Facilitate cyber risk communications, cyber risk lifecycle task completion and cyber risk aware decision making with technical and non-technical audiences </li></ul> Key Responsibilities: <ul> <li>Managing cyber risk assessments </li><li>Evaluating internal company's operational controls for alignment to cyber risk treatment needs. </li><li>Analyzing, framing, and updating threat and risk scenarios for use in cyber risk management </li><li>Communicating cyber risk to Management and designated stakeholders. </li><li>Assess and update cyber risk appetites for LOB. </li><li>Evaluate cyber risk treatment options and facilitate communication to stakeholders. </li><li>Training employees on cyber risk aware and risk first culture. </li><li>Adjust cyber risk scores based on available controls and treatment options. </li><li>Create cyber risk dashboards/reports based on complex risk, process and control relationships. </li><li>Facilitate risk management oversight in supporting internal/external audits and regulatory exams. </li></ul> CRA Requirements: <ul> <li>Prefer 5-10 years' experience in governance, risk, and compliance </li><li>Job field related certification(s), CISSP/CISA/CRISC (preferred but not required) </li><li>Previous experience as a compliance analyst in a related field. </li><li>In-depth knowledge of industry compliance requirements and standards. </li><li>Proficiency in compliance management software, Archer, ServiceNow, MetricStream, etc. </li><li>Ability to accurately complete applications for compliance certification. </li><li>Ability to effectively train employees. </li><li>Exceptional communication and interpersonal skills. </li><li>Understanding of regulatory frameworks </li><li>Requirements analysis </li><li>Ability to develop standards to maintain legal compliance </li><li>Quality management </li><li>Critical thinking and problem-solving skills </li><li>Organization, project management, and strategic planning skills </li><li>Familiarity with process improvement methodology </li><li>Attention to detail </li><li>Ability to embrace complexity </li> </ul>

Job Description:Role Summary/Purpose:The AVP, Security Risk Analyst will execute the work of the Synchrony (SYF) Application Security - Technology, Risk and Analytics Team. This individual will leverage knowledge of security policies, standards, and industry best practices as the key point of contact for documenting deviations from security standards. The AVP, Security Risk Analyst will contribute towards process improvements including assessment of vulnerability risk, enhancement of metrics, development of documentation, and identifying opportunities for streamlining and automation. This position will also be responsible for executing the strategic direction set by the VP of Application Security - Technology, Risk and Analytics.Were proud to offer you choice and flexibility. At Synchrony, our way of working allows you to have the option to work from home, near one of our Hubs or come into one of our offices. Occasionally you may be required to commute to our nearest office for in person engagement activities such as business or team meetings, training and culture events.Essential Responsibilities:The Application Security - Technology, Risk and Analytics Team coordinates across all elements of the IT organization at all levels, including senior executives. This role requires experience in information security, risk management, and vulnerability management. Responsibilities include: <ul><li>Evaluate and process exceptions to information security policies and standards related to vulnerability management</li><li>Perform analysis to evaluate risk associated with exceptions to standards</li><li>Assist in presenting exception risk metrics and vulnerabilities identified through the security exception process to technology leadership</li><li>Provide effective prioritization and tracking of exception request queue</li><li>Maintain cooperative relationship with infrastructure, application, database, network, and desktop/laptop teams to drive remediation</li><li>Analyze vulnerability data and assist with the prioritization and remediation of the identified vulnerabilities commensurate to risk and the vulnerability management standard</li><li>Understand vulnerabilities, their impacts, mitigation techniques, and document and articulate this understanding to various stakeholders</li><li>Update and develop security standards and templates as required to meet new regulatory/audit/etc. requirements</li><li>Leverage and enhance existing Application Security frameworks/policies/standards to ensure Synchrony Application Security maintains a minimum of industry best practices commiserate with organizations risk profile while also ensuring compliance with industry standards (e.g., PCI DSS)</li><li>Coordinate collection of data and documentation in support of examinations/audits</li><li>Work with existing solution vendors (e.g., Qualys, Fortify, and Sonatype) as necessary; identify potential solutions</li><li>Perform other duties and/or special projects as assigned. ?</li></ul>Qualifications/Requirements:<ul><li>Bachelors degree and a minimum 2 years of work experience in IT OR in in lieu of a degree, a High School Diploma/GED and minimum 3 years work experience</li><li>Minimum of 2 years of experience in risk or vulnerability management </li><li>Minimum of 2 years of experience in documenting information security risk</li></ul>Desired Characteristics:<ul><li>Industry certifications such as CISSP, CISA, CRISC are a plus</li><li>Financial services industry experience</li><li>Deep knowledge of and experience in vulnerability management, risk management, information security</li><li>Excellent written and oral communication skills, to include ability to present to a non-technical audience</li><li>Excellent problem-solving skills, to include demonstrated experience in and ability to analyze, understand, and resolve technical and non-technical issues and pursue the most relevant course of action</li><li>Self-starter with ability to work with minimal guidance/direction</li><li>Awareness of the latest cybersecurity trends and developments</li></ul>Grade/Level: 10 The salary range for this position is 95,000.00 - 160,000.00 USD Annual and is eligible for an annual bonus based on individual and company performance.Actual compensation offered within the posted salary range will be based upon work experience, skill level or knowledge. Salaries are adjusted according to market in CA, NY Metro and Seattle.Eligibility Requirements:<ul><li>You must be 18 years or older</li><li>You must have a high school diploma or equivalent</li><li>You must be willing to take a drug test, submit to a background investigation and submit fingerprints as part of the onboarding process</li><li>You must be able to satisfy the requirements of Section 19 of the Federal Deposit Insurance Act.</li><li>New hires (Level 4-7) must have 9 months of continuous service with the company before they are eligible to post on other roles. Once this new hire time in position requirement is met, the associate will have a minimum 6 months time in position before they can post for future non-exempt roles. Employees, level 8 or greater, must have at least 18 months time in position before they can post. All internal employees must consistently meet performance expectations and have approval from your manager to post (or the approval of your manager and HR if you dont meet the time in position or performance expectations).</li></ul>Legal authorization to work in the U.S. is required. We will not sponsor individuals for employment visas, now or in the future, for this job opening. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status. Our Commitment:When you join us, youll be part of a diverse, inclusive culture where your skills, experience, and voice are not only heardbut valued. We celebrate the differences in all of us and believe that our individual, unique perspectives is what makes Synchrony truly a great place to work. Together, were building a future where we can all belong, connect and turn ideals into action. Through the power of our 8 <a href="https://www.synchronycareers.com/our-culture/#diversity" target="_blank">Diversity Networks+</a>, with more than 60% of our workforce engaged, youll find community to connect with an opportunity to go beyond your passions.This starts when you choose to apply for a role at Synchrony. We ensure all qualified applicants will receive consideration for employment without regard to age, race, color, religion, gender, sexual orientation, gender identity, national origin, disability, or veteran status.Reasonable Accommodation Notice: <ul><li>Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.</li><li>If you need special accommodations, please call our Career Support Line so that we can discuss your specific situation. We can be reached at 1-866-301-5627. Representatives are available from 8am 5pm Monday to Friday, Central Standard Time</li></ul>Job Family Group:Information Technology

The IT risk analyst supports the IT risk management practice, which ensures risk is proactively identified, decisioned, communicated and monitored. The primary responsibilities of the IT risk analyst are to perform assessments of potential risk exposures and prepare actionable risk reporting. In this role, it is critical to foster strong working relationships with leaders in other areas of the enterprise to perform evaluations of the enterprise risk posture and to offer independent advice regarding ways to reduce risk in line with established risk appetites.The successful candidate thinks strategically, is intellectually curious and is comfortable working in undefined problem spaces. As a member of a growing enterprise, the IT risk analyst will be expected to shape and further refine the risk program and will have the opportunity to operate with both autonomy and empowerment from senior leadership. Top Must Haves:<ul><li>Risk management experience: previous experience working and reviewing cyber risk assessments</li><li>Familiarity with cyber security frameworks, such as, NIST-CSF</li><li>Experience with risk tools (administrative, power user, user)</li><li>Facilitate cyber risk communications, cyber risk lifecycle task completion and cyber risk aware decision making with technical and non-technical audiences</li></ul> Key Responsibilities:<ul><li>Managing cyber risk assessments</li><li>Evaluating internal company's operational controls for alignment to cyber risk treatment needs.</li><li>Analyzing, framing, and updating threat and risk scenarios for use in cyber risk management</li><li>Communicating cyber risk to Management and designated stakeholders.</li><li>Assess and update cyber risk appetites for LOB.</li><li>Evaluate cyber risk treatment options and facilitate communication to stakeholders.</li><li>Training employees on cyber risk aware and risk first culture.</li><li>Adjust cyber risk scores based on available controls and treatment options.</li><li>Create cyber risk dashboards/reports based on complex risk, process and control relationships.</li><li>Facilitate risk management oversight in supporting internal/external audits and regulatory exams.</li></ul> CRA Requirements:<ul><li>Prefer 5-10 years' experience in governance, risk, and compliance</li><li>Job field related certification(s), CISSP/CISA/CRISC (preferred but not required)</li><li>Previous experience as a compliance analyst in a related field.</li><li>In-depth knowledge of industry compliance requirements and standards.</li><li>Proficiency in compliance management software, Archer, ServiceNow, MetricStream, etc.</li><li>Ability to accurately complete applications for compliance certification.</li><li>Ability to effectively train employees.</li><li>Exceptional communication and interpersonal skills.</li><li>Understanding of regulatory frameworks</li><li>Requirements analysis</li><li>Ability to develop standards to maintain legal compliance</li><li>Quality management</li><li>Critical thinking and problem-solving skills</li><li>Organization, project management, and strategic planning skills</li><li>Familiarity with process improvement methodology</li><li>Attention to detail</li><li>Ability to embrace complexity</li></ul>

Ready to grow your career? We should talk. We seek a Cyber Risk Analyst for a contract-to-hire opportunity with one of our top-tier Cincinnati clients. This role is a Remote. To be successful in this role, you should have experience with Risk management. Job Description The IT risk analyst supports the IT risk management practice, which ensures risk is proactively identified, decisioned, communicated and monitored. The primary responsibilities of the IT risk analyst are to perform assessments of potential risk exposures and prepare actionable risk reporting. In this role, it is critical to foster strong working relationships with leaders in other areas of the enterprise to perform evaluations of the enterprise risk posture and to offer independent advice regarding ways to reduce risk in line with established risk appetites.The successful candidate thinks strategically, is intellectually curious and is comfortable working in undefined problem spaces. As a member of a growing enterprise, the IT risk analyst will be expected to shape and further refine the risk program and will have the opportunity to operate with both autonomy and empowerment from senior leadership. Top Must Haves:<ul><li>Risk management experience: previous experience working and reviewing cyber risk assessments</li><li>Familiarity with cyber security frameworks, such as, NIST-CSF</li><li>Experience with risk tools (administrative, power user, user)</li><li>Facilitate cyber risk communications, cyber risk lifecycle task completion and cyber risk aware decision making with technical and non-technical audiences</li></ul> Key Responsibilities <ul><li>Managing cyber risk assessments</li><li>Evaluating internal operational controls for alignment to cyber risk treatment needs.</li><li>Analyzing, framing, and updating threat and risk scenarios for use in cyber risk management</li><li>Communicating cyber risk to Management and designated stakeholders.</li><li>Assess and update cyber risk appetites for LOB.</li><li>Evaluate cyber risk treatment options and facilitate communication to stakeholders.</li><li>Training employees on cyber risk aware and risk first culture.</li><li>Adjust cyber risk scores based on available controls and treatment options.</li><li>Create cyber risk dashboards/reports based on complex risk, process and control relationships.</li><li>Facilitate risk management oversight in supporting internal/external audits and regulatory exams.</li></ul> CRA Requirements: <ul><li>Prefer 5-10 years experience in governance, risk, and compliance</li><li>Job field related certification(s), CISSP/CISA/CRISC (preferred but not required)</li><li>Previous experience as a compliance analyst in a related field.</li><li>In-depth knowledge of industry compliance requirements and standards.</li><li>Proficiency in compliance management software, Archer, ServiceNow, MetricStream, etc.</li><li>Ability to accurately complete applications for compliance certification.</li><li>Ability to effectively train employees.</li><li>Exceptional communication and interpersonal skills.</li><li>Understanding of regulatory frameworks</li><li>Requirements analysis</li><li>Ability to develop standards to maintain legal compliance</li><li>Quality management</li><li>Critical thinking and problem-solving skills</li><li>Organization, project management, and strategic planning skills</li><li>Familiarity with process improvement methodology</li><li>Attention to detail</li><li>Ability to embrace complexity </li></ul> About Golden Technology:Welcome to Golden Technology, an IT staffing company based in Cincinnati, OH. We are a faith-based organization dedicated to developing people and driving innovation. At Golden Technology, we believe in the power of community, the importance of integrity, and the potential within each individual. Our mission is to connect top talent with exciting opportunities, fostering growth and success for both our clients and candidates. Join us and be part of a team that values excellence, supports personal development, and is committed to making a positive impact in the world of technology.

LeadStack Inc. is an award-winning, one of the nation's fastest-growing, certified minority-owned (MBE) staffing services provider of contingent workforce. As a recognized industry leader in contingent workforce solutions and Certified as a Great Place to Work, we're proud to partner with some of the most admired Fortune 500 brands in the world. Job Title: Cyber Risk AnalystLocation:: Cincinnati, OH OR Charlotte, NC OR Boca Raton, FL and Chicago, IL -Hybrid Job Id: 24-01848Pay range: $70-$80/hour on W2Top Skills: .Job Description:We are seeking a skilled IT Risk Analyst to join our dynamic IT risk management team. In this critical role, you will be at the forefront of identifying, assessing, and mitigating potential cybersecurity risks across our enterprise. The ideal candidate will blend strategic thinking with hands-on risk management expertise to help shape and refine our risk program.Key Responsibilities:<ul><li>Conduct comprehensive cyber risk assessments and prepare actionable reports</li><li>Evaluate internal operational controls for alignment with cyber risk treatment needs</li><li>Analyze and update threat and risk scenarios for effective risk management</li><li>Communicate complex risk information to both technical and non-technical stakeholders</li><li>Assess and update cyber risk appetites for various lines of business</li><li>Facilitate risk management oversight for internal/external audits and regulatory exams</li><li>Train employees on cyber risk awareness and foster a risk-first culture</li><li>Create and maintain cyber risk dashboards based on complex risk, process, and control relationships</li></ul>Qualifications:<ul><li>5-10 years of experience in governance, risk, and compliance, preferably in cybersecurity</li><li>In-depth knowledge of industry compliance requirements and cybersecurity frameworks (e.g., NIST-CSF)</li><li>Proficiency in compliance management software (e.g., Archer, ServiceNow, MetricStream)</li><li>Strong analytical and problem-solving skills</li><li>Exceptional communication and interpersonal abilities</li><li>Experience in facilitating risk communications and decision-making processes</li><li>Familiarity with process improvement methodologies</li><li>Relevant certifications such as CISSP, CISA, or CRISC are preferred but not required</li></ul> know more about current opportunities at LeadStack , please visit us on https://leadstackinc.com/careers/ Should you have any questions, feel free to call me on (513) 318-4502 or send an email on waseem.ahmad@leadstackinc.com

Job Description: The IT risk analyst supports the IT risk management practice, which ensures risk is proactively identified, decisioned, communicated and monitored. The primary responsibilities of the IT risk analyst are to perform assessments of potential risk exposures and prepare actionable risk reporting. In this role, it is critical to foster strong working relationships with leaders in other areas of the enterprise to perform evaluations of the enterprise risk posture and to offer independent advice regarding ways to reduce risk in line with established risk appetites. The successful candidate thinks strategically, is intellectually curious and is comfortable working in undefined problem spaces. As a member of a growing enterprise, the IT risk analyst will be expected to shape and further refine the risk program and will have the opportunity to operate with both autonomy and empowerment from senior leadership. Top Must Haves: Risk management experience: previous experience working and reviewing cyber risk assessments Familiarity with cyber security frameworks, such as, NIST-CSF Experience with risk tools (administrative, power user, user) Facilitate cyber risk communications, cyber risk lifecycle task completion and cyber risk aware decision making with technical and non-technical audiences Requirements: Prefer 5-10 years experience in governance, risk, and compliance Job field related certification(s), CISSP/CISA/CRISC (preferred but not required) Previous experience as a compliance analyst in a related field. In-depth knowledge of industry compliance requirements and standards. Proficiency in compliance management software, Archer, ServiceNow, MetricStream, etc. Ability to accurately complete applications for compliance certification. Ability to effectively train employees Exceptional communication and interpersonal skills. Understanding of regulatory frameworks Requirements analysis Ability to develop standards to maintain legal compliance Quality management Critical thinking and problem-solving skills Organization, project management, and strategic planning skills Familiarity with process improvement methodology Attention to detail Ability to embrace complexity Key Responsibilities Managing cyber risk assessments Evaluating internal Kroger operational controls for alignment to cyber risk treatment needs. Analyzing, framing, and updating threat and risk scenarios for use in cyber risk management Communicating cyber risk to Management and designated stakeholders. Assess and update cyber risk appetites for LOB. Evaluate cyber risk treatment options and facilitate communication to stakeholders. Training employees on cyber risk aware and risk first culture. Adjust cyber risk scores based on available controls and treatment options. Create cyber risk dashboards/reports based on complex risk, process and control relationships. Facilitate risk management oversight in supporting internal/external audits and regulatory exams. Required Skills : Cyber Risk, NIST-CSF Background Check :Yes Drug Screen :Yes Notes : Selling points for candidate : Project Verification Info :The information provided below is for Apex Systems AV use only and is not to be distributed publicly, or to any third party. Any distribution of the below information will result in corrective action from Apex Systems Vendor Management. MSA: Restricted Client Letter: Will Provide Candidate must be your W2 Employee :Yes Exclusive to Apex :No Face to face interview required :No Candidate must be local :Yes Candidate must be authorized to work without sponsorship ::No Interview times set : :No Type of project : Master Job Title : Branch Code :

Job Description: The IT risk analyst supports the IT risk management practice, which ensures risk is proactively identified, decisioned, communicated and monitored. The primary responsibilities of the IT risk analyst are to perform assessments of potential risk exposures and prepare actionable risk reporting. In this role, it is critical to foster strong working relationships with leaders in other areas of the enterprise to perform evaluations of the enterprise risk posture and to offer independent advice regarding ways to reduce risk in line with established risk appetites. The successful candidate thinks strategically, is intellectually curious and is comfortable working in undefined problem spaces. As a member of a growing enterprise, the IT risk analyst will be expected to shape and further refine the risk program and will have the opportunity to operate with both autonomy and empowerment from senior leadership. Top Must Haves: Risk management experience: previous experience working and reviewing cyber risk assessments Familiarity with cyber security frameworks, such as, NIST-CSF Experience with risk tools (administrative, power user, user) Facilitate cyber risk communications, cyber risk lifecycle task completion and cyber risk aware decision making with technical and non-technical audiences Requirements: Prefer 5-10 years experience in governance, risk, and compliance Job field related certification(s), CISSP/CISA/CRISC (preferred but not required) Previous experience as a compliance analyst in a related field. In-depth knowledge of industry compliance requirements and standards. Proficiency in compliance management software, Archer, ServiceNow, MetricStream, etc. Ability to accurately complete applications for compliance certification. Ability to effectively train employees Exceptional communication and interpersonal skills. Understanding of regulatory frameworks Requirements analysis Ability to develop standards to maintain legal compliance Quality management Critical thinking and problem-solving skills Organization, project management, and strategic planning skills Familiarity with process improvement methodology Attention to detail Ability to embrace complexity Key Responsibilities Managing cyber risk assessments Evaluating internal Kroger operational controls for alignment to cyber risk treatment needs. Analyzing, framing, and updating threat and risk scenarios for use in cyber risk management Communicating cyber risk to Management and designated stakeholders. Assess and update cyber risk appetites for LOB. Evaluate cyber risk treatment options and facilitate communication to stakeholders. Training employees on cyber risk aware and risk first culture. Adjust cyber risk scores based on available controls and treatment options. Create cyber risk dashboards/reports based on complex risk, process and control relationships. Facilitate risk management oversight in supporting internal/external audits and regulatory exams. Required Skills : Cyber Risk, NIST-CSF Background Check :Yes Drug Screen :Yes Notes : Selling points for candidate : Project Verification Info :The information provided below is for Apex Systems AV use only and is not to be distributed publicly, or to any third party. Any distribution of the below information will result in corrective action from Apex Systems Vendor Management. MSA: Restricted Client Letter: Will Provide Candidate must be your W2 Employee :Yes Exclusive to Apex :No Face to face interview required :No Candidate must be local :Yes Candidate must be authorized to work without sponsorship ::No Interview times set : :No Type of project : Master Job Title : Branch Code :

Risk Analyst Jobs in Cincinnati

It Risk Analyst
November 18, 2024

Senior Cyber Risk Analyst
November 16, 2024

Cyber Risk Analyst
November 14, 2024

Avp Security Risk Analyst
November 12, 2024

Avp Security Risk Analyst
November 10, 2024

Cyber Risk Analyst
November 10, 2024

Senior Cyber Risk Analyst
November 10, 2024

Cyber Risk Analyst
November 10, 2024

Cyber Risk Analyst
October 30, 2024

Cyber Risk Analyst
October 28, 2024

Quick filters

Top companies

Risk Analyst Jobs in Cincinnati

It Risk AnalystNovember 18, 2024

Senior Cyber Risk AnalystNovember 16, 2024

Cyber Risk AnalystNovember 14, 2024

Avp Security Risk AnalystNovember 12, 2024

Avp Security Risk AnalystNovember 10, 2024

Cyber Risk AnalystNovember 10, 2024

Senior Cyber Risk AnalystNovember 10, 2024

Cyber Risk AnalystNovember 10, 2024

Cyber Risk AnalystOctober 30, 2024

Cyber Risk AnalystOctober 28, 2024

Quick filters

Top companies

It Risk Analyst
November 18, 2024

Senior Cyber Risk Analyst
November 16, 2024

Cyber Risk Analyst
November 14, 2024

Avp Security Risk Analyst
November 12, 2024

Avp Security Risk Analyst
November 10, 2024

Cyber Risk Analyst
November 10, 2024

Senior Cyber Risk Analyst
November 10, 2024

Cyber Risk Analyst
November 10, 2024

Cyber Risk Analyst
October 30, 2024

Cyber Risk Analyst
October 28, 2024