Cybersecurity Risk Analyst

Cybersecurity Risk Analyst

Location: Hybrid Northbrook, IL (Relocation candidates are acceptable)
Duration: 6-Month Contract-to-Hire

Interview: Virtual round

Job Summary

We are seeking a Cybersecurity Risk Analyst to assess and manage cybersecurity risks associated with third-party vendors, technologies, services, and business initiatives. The ideal candidate will have hands-on experience conducting cybersecurity risk assessments, evaluating security controls, documenting risk findings, and tracking remediation activities through closure.

This role will support third-party risk management, vendor due diligence, ongoing security monitoring, and customer security questionnaires while communicating risk findings and recommendations to business stakeholders.

Required Qualifications

• Minimum of 2+ years of relevant experience in cybersecurity, information security, technology risk, or risk management.
• Direct experience conducting cybersecurity risk assessments and documenting findings, risk decisions, and remediation activities.
• Experience in third-party/vendor risk management, including reviewing assessment responses, evaluating supporting evidence, assessing controls, and following up on identified gaps.
• Hands-on experience using ServiceNow for vendor risk assessments is mandatory. General ServiceNow ticketing experience alone will not meet this requirement.
• Strong understanding of cybersecurity risk concepts, including assets, threats, vulnerabilities, likelihood, business impact, control effectiveness, inherent risk, and residual risk.
• Experience applying recognized security frameworks, such as ISO 27001 or NIST.
• Strong written and verbal communication skills, with the ability to translate technical security issues into business risks and actionable recommendations.
• Bachelor's or master's degree in Business, Computer Science, Cybersecurity, Information Security, or a related field.

Preferred Qualifications

• CISSP, CISM, or CISA certification.
• Experience responding to customer security questionnaires.
• Experience supporting vendor security reviews, risk remediation, and ongoing third-party risk monitoring.