Cybersecurity Risk Analyst

About the role

The Cybersecurity Risk Analyst translates raw inputs from audits, threat feeds, projects, and vendor assessments into structured, contextual risk insights. Supports trend analysis, scenario modeling, and reporting that inform operational and strategic decisions.

Job Duties and Responsibilities

Analyze & Interpret Data (40%)

• Translates raw inputs (cyber, project, audit, vendor) into structured risk insights that highlight trends, gaps, or areas of concern.
• Support project risk assessments by gathering relevant data, interpreting control coverage, and highlighting areas of concern tied to the project scope.
• Provide contextual analysis of threats, vulnerabilities, and compliance requirements to inform architectural decisions and control recommendations.

Scenario Modeling & Forecasting (20%)

• Conducts what-if analysis or predictive modeling to evaluate risk exposure under different project design options or vendor configurations.
• Ensure that the information is correctly categorized, prioritized, and routed to the appropriate stakeholders for further analysis or action.

Collaboration (15%)

• Works with InfoSec, compliance, audit, and project teams to contextualize risks and validate impact.
• Assess whether a vendor, system, or control gap affects critical workflows, customer data, or compliance obligations.
• Assist the Security Architect in reviewing system designs, third-party integrations, or infrastructure. changes by providing risk context and identifying potential cybersecurity implications.
• Collaborate with the Security Architect to propose practical mitigation strategies and prioritize risk treatments based on organizational risk tolerance.
• Help guide less experienced team members through triage workflows, risk categorization logic, and contextual analysis techniques.
• Review work for accuracy, provide feedback, and support skill development through knowledge sharing.
• Educate stakeholders across cybersecurity, compliance, ETG, and business functions.

Support Risk Reporting (15%)

• Contributes data and insights to monthly, quarterly, or ad hoc reporting packages.
• Track and document identified risks, open issues, and mitigation actions in alignment with project timelines and audit.

Process Improvement (10%)

• Identifies recurring issues or gaps and proposes mitigations or enhancements.
• Collaborate with ETG platform teams or tool administrators to explore implementation options for improvements tied to intake workflows, automation, or triage logic.
• Collaborate with senior analysts, the Security Architect, and system owners to strengthen detection and response efforts, refine risk scoring models, and support secure system design.

Qualifications (Education, Experience, Certifications & KSA)

• Bachelor's degree in Cybersecurity, Information Systems, Risk Management, or related field; or equivalent combination of education and work experience.
• 3-4 years of directly related work experience required.
• ISACA Certified Information Systems Auditor (CISA), CompTIA CySA+, CompTIA Security+, or Open FAIR Certification preferred.

Additional information

The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all responsibilities, skills, efforts or working conditions associated with a job.

Pay and benefits

We offer our employees a robust compensation package! Our comprehensive benefits include: medical, dental and vision insurance coverage; 100% company-paid life and disability coverage, 401k options with company match, three weeks PTO by the end of the first year and much more. Allied proudly promotes from within as part of a strong commitment to providing career growth opportunities for employees of all levels. Our diverse business portfolio allows employees broad career options with the advantage of staying with the same organization.

To view our privacy statement

To view our terms and conditions