Cyber Security Senior Analyst

R-35334 Cyber Security Senior Analyst (TPRM)

Required Technical and Professional Experience:

4 to 6 years of overall work experience in IT applications, infrastructure, cybersecurity, and risk management.

Proven experience in performing third-party risk assessments, including identifying and evaluating potential security risks related to third-party vendors and partners. Strong understanding of security governance practices and frameworks across an organization.

Experience in conducting information security audits and assessing systems, processes, and controls.

Ability to develop and implement strategies for managing and mitigating identified risks.

Hands-on experience in designing and maintaining security controls and standards in collaboration with cross-functional teams.

Strong analytical skills to assess and continuously improve security practices and compliance with regulatory requirements.

Experience in documenting audit findings, developing remediation plans, and reporting to senior leadership.

Excellent communication skills with the ability to present technical concepts to both technical and non-technical stakeholders.

Ability to work independently in a high-pressure environment while ensuring deadlines are met.

Preferred Technical and Professional Experience:

Familiarity with industry-standard frameworks such as ISO 27001, NIST, and other regulatory compliance guidelines.

Experience with third-party security governance tools and automation of security monitoring processes.

Hands-on experience with security-related technologies such as vulnerability management, data protection, and incident response.

Strong problem-solving skills with the ability to initiate improvements to security processes and procedures.

Exposure to CI/CD processes and associated security controls.

Knowledge of scripting or automation tools to enhance audit and monitoring capabilities.

Ability to work collaboratively with global teams and manage relationships across business lines.

Certifications such as CISA, CISM, CISSP, or equivalent are a plus.