IT Governance and Risk Analyst

Job Purpose

Act as an IT risk quantification analyst in Cybersecurity Governance, Risk, and Compliance, to evaluate and measure the potential impact of cybersecurity threats on an organization, using structured methodologies and industry frameworks, e.g. - FAIR, MITRE, and NIST.

Evaluate and measure the potential impact of cybersecurity threats on an organization.

Identify, analyze, and prioritize risks based on likelihood and potential loss.

Collaborate with cybersecurity teams and business stakeholders to ensure risk insights support organizational objectives and regulatory requirements.

Develop and recommend mitigation strategies while translating complex technical findings into clear, data-driven guidance for decision makers.

Key Accountabilities

• Monitor and improve IT risk processes, tools, and documentation
• Update risk scenarios, benchmarks, and mitigation strategies
• Maintain the Information Security Management System (ISMS)
• Advise on balancing security controls with business impact
• Risk & Control Self Assessment (RCSA)
• Conduct cybersecurity risk assessments and identify control gaps
• Document results, prepare management reports, and drive remediation
• Support and train teams on RCSA standards and methodologies
• Risk Modeling & Analysis
• Develop and maintain data, process, and event-based risk models
• Quantify risk, validate models, and communicate findings to stakeholders
• Data Collection & Reporting
• Gather, analyze, and document cybersecurity risk data
• Maintain the risk register and data libraries
• Collaboration & Domain Expertise
• Partner cross-functionally to implement risk mitigation
• Stay current on cyber threats, regulations, and industry best practices

Qualifications, Experience, And Skills

• A Bachelor's level degree in IT / IS / Cybersecurity or equivalent level of relevant industry experience
• Desired Certifications (any): OpenFAIR, CCSK, CISSP, CISM, or equivalent are highly desirable
• At least 5 or more years of demonstrable relevant experience in the industry, specifically in the cybersecurity space
• Core skills must include risk assessment, analytical thinking, communication, and strong knowledge of cybersecurity frameworks, regulatory obligations, and evolving threat landscapes
• Be well-familiar with industry guidelines and best practices around TPRM (Third Party Risk Management)

Workstyle

This is an onsite position, based in Ohio.

Total Rewards

• Competitive Base Salary (pay will be based on several variables that include, but not limited to geographic location, work experience, etc.)
• Paid Overtime
• Regional Bonus (when applicable)
• Industry-leading Benefit Plans (Medical, Dental, Vision, Rx)
• Paid time off, including vacation, holidays, shutdown
• Company Paid Short-Term and Long-Term Disability
• 401(K) Plan with company match + additional contribution
• Career Growth Advancement Opportunities
• Career Mobility
• Education Reimbursement for Continued Learning
• Training and Development programs
• Additional Offerings
• Tuition Assistance & Student Loan Repayment
• Lifestyle Account
• Childcare Reimbursement Account
• Eldercare Support
• Wellbeing Program
• Community Service and Engagement Programs
• Product Programs

What Differentiates Honda and Make Us an Employer of Choice?

Total Rewards:

• Competitive Base Salary (pay will be based on several variables that include, but not limited to geographic location, work experience, etc.)
• Paid Overtime
• Regional Bonus (when applicable)
• Industry-leading Benefit Plans (Medical, Dental, Vision, Rx)
• Paid time off, including vacation, holidays, shutdown
• Company Paid Short-Term and Long-Term Disability
• 401(K) Plan with company match + additional contribution
• Career Growth Advancement Opportunities
• Career Mobility
• Education Reimbursement for Continued Learning
• Training and Development programs
• Additional Offerings
• Tuition Assistance & Student Loan Repayment
• Lifestyle Account
• Childcare Reimbursement Account
• Eldercare Support
• Wellbeing Program
• Community Service and Engagement Programs
• Product Programs