Cybersecurity Risk Analyst
pipe recruitTampa (FL)
Cybersecurity Risk Analyst
Posted 4 days ago
pipe recruitTampa (FL)
SENIORITY
Senior
About the role
Cybersecurity Risk Analyst We are seeking a Cybersecurity Risk Analyst to join our Information Security Risk team. This role focuses on assessing risks across applications (on-prem and cloud), infrastructure, and third-party vendors through a formalized risk assessment program. The ideal candidate is analytical, technically savvy, and experienced in evaluating cybersecurity risks within enterprise environments. Candidates with a background in the Financial Services industry will be given preference. Key responsibilities include developing and maintaining risk assessment questionnaires tailored to applications and infrastructure (on-prem & cloud), conducting cybersecurity risk assessments using a defined risk framework and methodology, identifying and documenting control deficiencies in business processes and technology systems, partnering with IT and business units to communicate risks and agree on findings and mitigation plans, providing actionable remediation recommendations for identified control gaps, evaluating and validating management responses to ensure sufficient risk mitigation, generating assessment reports and risk dashboards for stakeholders, documenting risk issues in the designated risk register, guiding stakeholders through policy exceptions and risk acceptance processes, and contributing to process improvements for the risk assessment program.
Required skills and experience include:
5+ years of risk assessment experience in one or more areas: application, infrastructure, vendor risk management, a strong grasp of Information Risk Management best practices, technical understanding of infrastructure, networks, databases, systems, and their cybersecurity implications, experience in the Financial Services industry is a plus, knowledge of security methodologies, policies, standards, and cybersecurity best practices, ability to communicate technical concepts to both technical and non-technical audiences, proficiency with MS PowerPoint and Excel for presentations and data analysis, strong analytical, critical thinking, and organizational skills, demonstrated ability to work collaboratively and influence decision-making, and strong writing and communication skills, with the ability to adapt tone for various audiences. Preferred education and certifications include a bachelor's degree in a related field preferred and industry certifications such as CISSP, CISM, CRISC, or CCSP are a plus.
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.