Cyber Security Analyst

Job Summary

This hybrid day shift Cyber Security Analyst role is responsible for evaluating and managing technology risk across enterprise systems while enabling and supporting ongoing business operations. The analyst will use deep risk management experience to protect critical assets, strengthen control environments, and reduce exposure to evolving cyber threats. Prior experience in check processing domains is advantageous to better understand financial transaction risks and to help ensure secure, compliant operations.

Responsibilities

• Assess enterprise technology environments to identify cyber risks and control gaps, applying risk management practices to prioritize remediation efforts that protect critical systems and data.
• Develop and maintain comprehensive risk registers that clearly document vulnerabilities, threat scenarios, impact ratings, and mitigation plans to support transparent risk decisions by stakeholders.
• Perform detailed risk assessments for new and existing applications, infrastructure changes, and third-party services to ensure cyber risk is evaluated before deployment or integration.
• Partner with security engineering and operations teams to define practical risk reduction actions, translate findings into clear requirements, and ensure mitigation steps align with business needs.
• Monitor security alerts, risk indicators, and incident trends to detect emerging risk patterns and deliver timely recommendations that strengthen defenses and reduce recurrence.
• Coordinate periodic control testing and validation activities to verify that implemented risk treatments are effective, measurable, and aligned with internal standards and regulatory obligations.
• Produce concise risk reports and dashboards for management, highlighting key risk drivers, residual exposure levels, and the progress of remediation initiatives across technology domains.
• Contribute to policy and standard development by providing input informed by observed risks and incidents, ensuring documented expectations are practical and aligned with recognized security frameworks.
• Advise project teams during system design and change initiatives to embed appropriate security controls, ensuring risk considerations are addressed early and minimizing the need for costly rework.
• Engage with business stakeholders to explain cyber risk in clear terms, enabling informed decisions that balance protective measures with operational efficiency and customer impact.
• Apply knowledge of payment and transaction flows, particularly in check processing environments, to identify fraud and operational risks and to propose control enhancements that secure financial operations.
• Support continuous improvement by documenting lessons learned from assessments and near-miss events, recommending updates to risk methodologies, tools, and processes for better outcomes.
• Maintain accurate and up-to-date documentation of risk management activities, methodologies, and outcomes to support audits, compliance reviews, and organizational learning.

Qualifications

• Demonstrate five to seven years of professional experience in cyber security roles focused on risk management, including practical exposure to risk assessment, mitigation planning, and control evaluation.
• Possess strong knowledge of core risk management concepts such as likelihood analysis, impact determination, control effectiveness, and residual risk calculation within technology environments.
• Apply familiarity with industry security frameworks and standards, using them as references for designing and assessing controls across applications, networks, and data handling processes.
• Exhibit analytical skills to interpret complex technical information, security alerts, and vulnerability data, translating them into clear risk statements and prioritized actions.
• Utilize excellent communication abilities to prepare clear documentation, risk reports, and stakeholder updates that support decision-making and foster shared understanding of cyber exposures.
• Bring working knowledge of financial or payment processing domains, including check processing, to strengthen understanding of transaction risks and to guide secure process and system design.