Cybersecurity Analyst

About the Role

We are seeking a cybersecurity professional to support the continued development and execution of NEA's cybersecurity risk management program. This role will coordinate security assessments, third-party risk reviews, application security evaluations, penetration testing activities, and remediation tracking across the organization. The successful candidate will work closely with engineering teams, application owners, vendors, and business stakeholders to identify cybersecurity risks, document findings, and drive issues through resolution. This individual will also help standardize cybersecurity processes, reporting, and governance while using AI-enabled tools to improve analysis, efficiency, and decision-making.

Key Responsibilities

• Cybersecurity Risk Management: Support cybersecurity assessments and risk reviews across applications, platforms, vendors, and technology solutions; document identified risks, control gaps, findings, compensating controls, and formal risk decisions; track cybersecurity findings and remediation activities through validation and closure; support risk acceptance and exception handling, including documenting formal security decisions when remediation is deferred.
• Third-Party and Application Security: Support security assessments for vendors, SaaS platforms, development tools, and AI-enabled solutions; coordinate security reviews for applications and technology tools, including evidence collection, documentation, findings management, and stakeholder follow-up; partner with application owners, engineering teams, vendors, and business stakeholders to obtain required information and resolve identified concerns.
• Security Testing and Resiliency: Support penetration testing activities, including scheduling, scope coordination, results management, remediation tracking, and reporting; assist with resiliency assessments for critical applications by organizing documentation, evaluating risk information, and tracking required actions; work with technical and business teams to identify appropriate remediation plans and ensure cybersecurity risks are addressed in a timely manner; assist with audit and evidence requests by organizing support materials, tracking responses, and confirming completeness.
• Governance, Reporting, and Process Improvement: Maintain accurate inventories of assessed applications, vendors, findings, risk decisions, and remediation status; develop and maintain consistent assessment templates, workflows, procedures, reports, and dashboards; provide clear and actionable reporting on cybersecurity risks, assessment activity, remediation progress, and program performance; analyze recurring findings, remediation patterns, and program trends to help prioritize work and improve the overall cybersecurity program; identify opportunities to improve the consistency, scalability, and effectiveness of cybersecurity review processes.
• AI-Enabled Cybersecurity Productivity: Use AI assistants and related tools to improve cybersecurity research, risk analysis, documentation, and decision support; apply AI-enabled capabilities to streamline evidence review, reporting, remediation tracking, and other repeatable cybersecurity activities; validate AI-generated outputs, protect sensitive information, and ensure responsible use of AI tools in cybersecurity work.
• Collaboration and Ownership: Collaborate with engineering, application owners, cybersecurity teams, vendors, and business stakeholders to identify security gaps and support remediation; translate cybersecurity risks and technical findings into clear, business-relevant language; manage assigned assessments and findings from initiation through completion while communicating risks, dependencies, and delays proactively; apply working knowledge of application security and DevSecOps practices, including vulnerability management concepts and secure delivery workflows.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Risk Management, or equivalent practical experience.
• Experience supporting cybersecurity risk assessments, security compliance activities, application security reviews, or third-party risk management.
• Familiarity with cybersecurity controls, risk management concepts, vulnerability management, and remediation practices.
• Experience coordinating work across technical teams, business stakeholders, and external vendors.
• Strong organizational skills with the ability to manage documentation, findings, deadlines, and multiple concurrent assessments.
• Strong written and verbal communication skills, including the ability to explain cybersecurity risks to both technical and nontechnical audiences.
• Experience using reporting, workflow, ticketing, governance, risk, and compliance tools.
• Familiarity with GRC, workflow, or case management tools used for risk tracking and remediation.
• Experience with vulnerability management, security review coordination, or penetration test support.
• Basic familiarity with application security and DevSecOps concepts such as SAST, SCA, DAST, CI/CD, and secure coding.
• Ability to use AI assistants and related technologies responsibly to improve analysis, documentation, and workflow efficiency.
• Ability to validate AI-assisted outputs and handle sensitive information appropriately.
• High School Grad / GED with Bachelor's or Equivalent Experience and 2+ years experience.

Preferred Qualifications

• Certified Information Systems Auditor (CISA) certification.

Pay

$88,000.00 to $132,000.00 per year. Starting pay will be based on several factors including, but not limited to, experience, qualifications, job-related and industry knowledge and skills and education/training.