Technology & Cybersecurity Risk Management Analyst

About the role

The Technology & Cybersecurity Risk Management (T&CRM) Engineer supports the T&CRM program by analyzing technology and cybersecurity risks, conducting risk assessments, leading risk-related initiatives, and enhancing risk management processes. This role helps identify, visualize, and reduce technology and cybersecurity risks while guiding stakeholders through risk-based decision-making.

Location: CYBERSECURITY DIVISION, Plano, Texas, United States. Duration: Long-term.

Experience: 10 Years.

Responsibilities

• Conduct risk intake, assessments, triage sessions, and stakeholder risk discussions.
• Assess technology and cybersecurity risks using NIST, COBIT, and ISO frameworks.
• Identify, document, and evaluate inherent, residual, and emerging technology risks.
• Review controls and evaluate their effectiveness in mitigating identified risks.
• Map risks to controls and applicable framework and policy requirements.
• Facilitate control walkthroughs and risk discussions with control owners and stakeholders.
• Document risk statements, controls, evidence, and assessment results in governance tools and Word/Excel/PPT.
• Develop risk treatment recommendations and track remediation activities through closure.
• Escalate overdue actions, unresolved risks, and significant control or compliance concerns.
• Prepare executive-ready risk reports, dashboards, and governance presentation materials.

Requirements

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field (or equivalent experience).
• 1 3 years of experience in cybersecurity or technology risk management, IT risk, cybersecurity, compliance, or related discipline.
• Foundational understanding of cybersecurity principles, risk assessment methodologies, and common security control frameworks.
• Experience supporting projects or initiatives that require coordination across multiple stakeholders.
• Strong written and verbal communication skills, with the ability to clearly document risks and recommendations.

Skills

• Technology and Cybersecurity Fundament