Cybersecurity Lead Risk Analyst

The Cybersecurity Lead Risk Analyst will be a member of the Global Cybersecurity department reporting to the Security Performance Management team and is primarily responsible for assisting with the execution of internal and third party risk analysis and assessments related to our business units. This may include mergers and acquisitions, joint ventures and geographically isolated locations within our business units. In addition, the lead analyst will be involved in developing and maintaining security risk monitoring and reporting systems, conducting business unit risk assessments and providing analytical support to risk areas. This role will work closely with the Global Cybersecurity team to assess and implement the controls necessary to ensure the protection of information systems.

Responsibilities :

• conducting third party security assessments and defining remediation plans as necessary .
• conducting internal assessments and / or compliance reviews.
• communicate risk findings and recommendations that are clear and actionable by business stakeholders and are understood for appropriate business decisioning.
• monitor any assigned remediation efforts.
• evaluate internal submissions to determine likelihood and impact of potential risks.
• evaluate trending of assessment results and compliance reviews to communicate clear risk posture of business units.
• facilitates the remediation of control gaps and escalates critical issues to leadership.
• advise senior leadership on risk management strategies, including risk mitigation, risk reduction, risk transfer, and residual risk analysis.
• communicate business unit risk during Enterprise Risk Management report outs.

Qualifications :

As a Lead Risk Analyst, you must possess strong skills to identify security risks and technical remediation or mitigating control options, be proactive in solving problems, and coordinate efforts across departments and functions.