Cybersecurity Risk Analyst

Responsibilities

• Develop and update Cybersecurity policies, standards, and procedures referencing NIST 800-53 controls and the NIST Cybersecurity Framework, including implementing revisions in accordance with updates in relevant regulatory or industry Cybersecurity practices
• Track remediation items and/or findings to completion as part of the risk assessment process
• Collaborate with business partners to manage Cybersecurity needs
• Initiate, facilitate, and promote Cybersecurity within the organization and monitor adherence to Cybersecurity policies, standards and controls
• Partner with Application Custodians to perform application risk assessments
• Drive maturation of the Cybersecurity Risk Program through continuous process improvement

Qualifications

• High level understanding of technology infrastructure, security concepts and platforms
• Advanced knowledge of the OSI model and security that is associated with each layer
• Knowledge of information security standards/frameworks (ie, NIST Cybersecurity Framework, ISO 27001)
• Skills in applying structured analysis methods to various types of data to establish trends, determine variability and business impact
• Communicates quickly, clearly, concisely, appropriately and intelligently
• Ability to think strategically and make collaborative decisions
• Ability to effectively negotiate with vendors on upgrades and acquisitions
• Fosters open communication, speaks with impact, listens to others and writes effectively
• Effective planning, time management, negotiation and delegation skills
• Approaches problems with an open-mind and creates new and innovative ideas and methods

What We Offer

• Generous benefits package available on day one to include: 401K matching, bonding leave for new parents (12 weeks, 100% paid), tuition assistance, training, GM employee auto discount, community service pay and nine company holidays.
• Hybrid work environment, 4-days a week in office.