" Technology & Cybersecurity Risk Management Analyst"

Strong candidates will be able to clearly articulate technology risks, controls, control gaps, and remediation requirements while maintaining high-quality documentation and supporting multiple risk initiatives simultaneously. This role will focus on identifying, assessing, documenting, and monitoring technology and cybersecurity risks while working closely with control owners and business stakeholders.

Technology & Cybersecurity Risk Management Analyst

Division

Cybersecurity

Location

Plano, Texas

Experience Required

1–3 Years
Position Summary
We are seeking a Technology & Cybersecurity Risk Management Analyst to support enterprise technology and cybersecurity risk management initiatives.

This role will focus on identifying, assessing, documenting, and monitoring technology and cybersecurity risks while working closely with control owners and business stakeholders. The successful candidate will conduct risk assessments, evaluate security controls, support remediation activities, and develop risk reporting and governance materials.

The ideal candidate has foundational experience in cybersecurity, technology risk, IT risk, compliance, or governance, with knowledge of frameworks such as NIST, COBIT, and ISO 27001.
Key ResponsibilitiesTechnology & Cybersecurity Risk Management

• 
  Conduct risk intake, assessments, triage sessions, and stakeholder risk discussions.
  
• 
  Assess technology and cybersecurity risks using NIST, COBIT, and ISO 27001 frameworks.
  
• 
  Identify, document, and evaluate inherent, residual, and emerging technology risks.
  
• 
  Review security controls and assess their effectiveness in mitigating identified risks.
  
• 
  Map risks to controls, policies, and applicable framework requirements.
  
• 
  Facilitate control walkthroughs and risk discussions with control owners and stakeholders.
  

Risk Documentation & Remediation

• 
  Document risk statements, controls, evidence, and assessment results.
  
• 
  Develop risk treatment and mitigation recommendations.
  
• 
  Track remediation activities and action items through closure.
  
• 
  Escalate overdue actions, unresolved risks, and significant control or compliance concerns.
  
• 
  Maintain accurate and complete risk records within governance and risk management tools.
  

Reporting & Stakeholder Support

• 
  Develop executive-ready risk reports, dashboards, and governance presentations.
  
• 
  Communicate technology and cybersecurity risks to technical and non-technical stakeholders.
  
• 
  Coordinate risk activities across multiple stakeholders and concurrent initiatives.
  
• 
  Identify opportunities to improve and streamline risk management processes.
  

Required Qualifications

• 
  Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field, or equivalent professional experience.
  
• 
  1–3 years of experience in cybersecurity, technology risk management, IT risk, compliance, governance, or a related discipline.
  
• 
  Foundational understanding of cybersecurity principles, security controls, threats, and risk assessment methodologies.
  
• 
  Knowledge of NIST, COBIT, and ISO 27001 frameworks.
  
• 
  Understanding of control design, control effectiveness, and risk mitigation concepts.
  
• 
  Experience supporting projects or initiatives involving multiple stakeholders.
  
• 
  Strong analytical, organizational, and project coordination skills.
  
• 
  Strong written and verbal communication skills.
  
• 
  Ability to clearly document risks, controls, findings, and recommendations.
  

Tools & Technology

• 
  ServiceNow
  
• 
  Microsoft Excel
  
• 
  Microsoft PowerPoint
  
• 
  Microsoft Word
  
• 
  Microsoft Copilot
  
• 
  Governance, Risk & Compliance (GRC) tools
  
• 
  NIST
  
• 
  COBIT
  
• 
  ISO 27001
  

Ideal Candidate Profile
The ideal candidate is a detail-oriented cybersecurity or technology risk professional who is comfortable working with control owners and stakeholders across technical and business teams. Strong candidates will be able to clearly articulate technology risks, controls, control gaps, and remediation requirements while maintaining high-quality documentation and supporting multiple risk initiatives simultaneously.