DirectJobHub
Jobs · Minnesota

Cybersecurity Business Analyst — Data Risk – Multiple Offices (Hybrid)

Littler · Minneapolis, MN · 1 mo ago
Hybrid$138k–$152k/yrFull-time

About the role

The Cybersecurity Business Analyst - Data Risk identifies, analyzes, and helps remediate risks to the firm's sensitive and regulated data throughout its lifecycle, bridging security, privacy, compliance, and business teams. The role translates data protection requirements into actionable controls, clear reporting, and prioritized risk decisions that reduce exposure while enabling the business. This is a hybrid position that can be resident in Phoenix, AZ; Atlanta, GA; Minneapolis, MN; Seattle, WA; Charlotte, NC; Miami or Orlando, FL; or Dallas, TX, with an onsite expectation of once per month.

Responsibilities

  • Data risk analysis and assessment
    • Maintain an inventory of sensitive and regulated data, data flows, systems, and third-party sharing.
    • Conduct data risk assessments covering confidentiality, integrity, availability, and regulatory exposure.
    • Analyze data classification, access, retention, and handling to identify gaps and control weaknesses.
    • Quantify and prioritize data risks, and track remediation activities through to closure.
  • Data governance and controls
    • Support data classification, DLP, and data protection policies and standards.
    • Translate privacy and regulatory requirements (e.g., GDPR, CCPA, HIPAA where applicable) into data control requirements.
    • Partner with control owners to define, document, and validate data safeguards.
    • Monitor control effectiveness and produce metrics on the firm’s data risk posture.
  • Requirements, reporting, and analysis
    • Gather and document business and security requirements for data protection initiatives.
    • Build dashboards and reports on data risk, exposure, and remediation progress for leadership.
    • Perform root-cause and trend analysis on data incidents, DLP alerts, and access anomalies.
    • Support audits and client assessments with data risk evidence and documentation.
  • Stakeholder enablement and collaboration
    • Serve as a liaison between Security, Privacy, Risk, IT, and business stakeholders.
    • Translate technical data risks into clear business language and actionable recommendations.
    • Provide guidance that helps teams handle data safely and meet compliance obligations.
    • Support response to data-related incidents, findings, and control failures.

Qualifications

  • Experience in a legal, professional services, or other highly regulated environment.
  • Familiarity with data governance and risk platforms (e.g., OneTrust, Microsoft Purview, ServiceNow).
  • Comfort with data analysis and visualization tools (e.g., Excel / Power BI) and basic querying (e.g., SQL).
  • Certifications
    • Core security / risk: CISM, CRISC, or CISSP.
    • Data / privacy: CIPP, CIPM, or CDPSE.
    • Governance / analysis: ISO/IEC 27001 lead implementer/auditor or a recognized business analysis certification (e.g., CBAP).

Benefits

We offer a generous benefits package to full-time and part-time employees working at least a 50% schedule.

  • Comprehensive health, dental and vision plan for you, your spouse/domestic partner and children.
  • Superior 401(k) plan.
  • Ample time off programs.
  • Mental health programs.
  • Family building and caregiving.
  • Generous paid parental leave.
  • Life insurance.
  • Disability insurance.
  • Wellness program.
  • Flexible spending accounts.
  • Employee referral bonus program.

Pay

The salary range is $137,800 to $151,600 annually and includes eligibility for performance-based bonuses. Factors which may affect starting pay within this

Similar jobs