Cybersecurity Risk & Compliance Analyst
goodwill industries of south floridaMiami Springs (FL)
Cybersecurity Risk & Compliance Analyst
Posted today
goodwill industries of south floridaMiami Springs (FL)
SENIORITY
Senior
About the role
Cybersecurity Risk And Compliance Analyst The Cybersecurity Risk and Compliance Analyst ensures that the organization's technology ecosystem is evaluated correctly, assessed, and managed to ensure compliance and minimize cybersecurity risk exposure and impacts to the business. The analyst will assist with tracking open audit findings and facilitate response generation, information gathering, testing evidence, and escalation of the prior conclusions. The analyst will collaborate with infrastructure team members, drive the adoption of security best practices, assist with creating new policies, improve existing security processes, and support adherence to the organization's security policies and procedures. BS or MA in computer science, information security, cybersecurity or a related field.· 3+ years of experience in an IT audit, enterprise risk management (ERM) role or cyber risk management role· 3+ years of experience with regulatory compliance, risk management frameworks, and information security management frameworks (e.g., ISO 27000, CMMC, NIST 800-171, NIST Risk Management Framework, CARF, etc.)· Strong background in conducting Business Impact Analysis (BIA) to evaluate the potential impact of cybersecurity risk on critical business processes and functions.· Experience understanding and articulating business goals and objectives.· Experience identifying and assessing risks to the organization's business.· Experience communicating complex technical concepts to non-technical audiences.· Experience with cybersecurity principles and practices, including risk management, security controls, and incident response.· Experience with cybersecurity technologies and systems, such as firewalls, intrusion detection systems, and security information and event management (SIEM) systems.· Familiarity in one or more of the following areas: Identity management, PAM, SSO and MFA· Ability to leverage research from various sources such as government research, think tanks, academic research, and industry reports
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.