Cybersecurity Risk & Compliance Analyst

Job Summary Responsibilities Exceptions Management

• Support the end-to-end exceptions lifecycle, including reviewing exception assessments, performing risk analysis, and coordinating with subject matter experts (SMEs) to validate risk ratings
• Prepare exception submissions for approval and acceptance, ensuring documentation meets process and audit standards
• Track exception status, expirations, and renewals, and follow up with control/process owners as needed
• Maintain exceptions management tooling and templates to support consistent intake and processing

Issues Management

• Process and risk-rate individual instances of non-compliance identified through audits, assessments, or self-identification
• Work with control owners to validate issue details, root cause, and remediation plans
• Track issues through to closure, escalating overdue or high-risk items as appropriate
• Maintain issue management documentation and evidence files

Risk Register

• Support processing and risk rating of organization-wide cybersecurity risks for inclusion in the risk register
• Help maintain and update risk treatment plans under guidance
• Support vendor and third-party risk management activities, including questionnaire reviews and evaluation of third-party security controls
• Assist with cybersecurity due diligence for business initiatives and embedding requirements into business processes

Policies Standards Maintenance

• Work with policy and standards SMEs to ensure verbiage remains accurate, current, and aligned to regulatory and organizational requirements
• Support the annual policy review cycle, tracking review dates and coordinating updates with business units
• Help maintain the cybersecurity policy repository with proper version control
• Assist with development of cybersecurity awareness training materials

Metrics KPIs

• Track and compile key risk indicators (KRIs) and metrics across Risks, Issues, Exceptions, and Policies/Standards workflows
• Support preparation of board and management-level reporting on program metrics
• Help identify trends or gaps in metrics to support continuous improvement

Location Scheduled Weekly Hours

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.