Risk Analyst

Job Summary

Within Information Security we blend risk strategy, digital identity, cyber defense, application security and technology solutions as we consider the entire security lifecycle. You will join a team of hardworking, security-focused individuals dedicated to supporting, protecting, and enabling the business through innovative, secure solutions that provide speed to market and business value.

The Technology Assurance, Risk, and Policy (TARP) function within Information Security strives to create and promote a holistic Governance, Risk, and Compliance (GRC) program by creating a robust, resilient, and proactive governance framework, supported by a strategic risk management approach and stringent compliance structures. It aims to integrate and align its GRC initiatives in line with the global firm s objectives and emerging threats within the cybersecurity landscape.

Furthermore, the Policy, Risk, and Controls (PRC) Enablement & Awareness team aims to manage the human element of risk through Human Risk Management, which involves security awareness, training, culture, and behavior management.

Your key responsibilities

• Maintain and optimize a human risk measurement framework, defining the metrics and indicators that quantify security behaviors, culture, engagement, and human risk across the organization.
• Leverage AI to analyze behavioral data, identify patterns and human risk indicators, and model or predict where risky behaviors are most likely to occur.
• Work with stakeholders to consolidate data from across the Human Risk Management program into reporting that tells a clear, connected story.
• Serve as the AI-forward thought partner for the Human Risk Management team, identifying responsible and practical ways to apply AI for both intelligence (measurement, prediction, insight) and service offerings (e.g., AI-powered solutions that reinforce secure behaviors).
• Partner with the Security Culture and Engagement Lead to translate behavioral insight into targeted interventions, campaigns, and reinforcement strategies.
• Develop executive-ready reporting, visualizations, and recommendations that communicate human risk trends, program effectiveness, and return on investment to senior stakeholders.
• Design and analyze surveys, assessments, experiments, and A/B tests to evaluate the impact of behavior change initiatives and continuously improve them.
• Ensure that data and AI are used responsibly, ethically, and in line with EY privacy, data protection, security, and governance requirements.
• Stay informed on developments in behavioral science, data science, AI, and human risk measurement, bringing new methods and innovation into the program.

Skills and attributes for success

• Strong analytical and data science skills, with the ability to work with behavioral, engagement, and risk data to generate meaningful insight.
• Hands-on familiarity with AI and machine learning concepts and tools, and a track record of applying them to solve practical problems.
• Understanding of behavioral science, psychology, or human risk principles and how they translate into measurable behaviors.
• Ability to translate complex data and AI analysis into clear, compelling narratives for non-technical and executive audiences.
• Strong data visualization and storytelling skills.
• Curiosity, creativity, and a bias toward experimentation and continuous improvement.
• Ability to collaborate across functions, levels, and geographic regions.
• Sound judgment in the ethical and responsible use of data and AI.
• Ability to understand and integrate cultural differences and motivations across global teams.
• Demonstrate integrity, professionalism, and sound judgment.

To qualify for the role, you must have

• Bachelor s degree in Data Science, Analytics, Statistics, Computer Science, Behavioral Science, Psychology, Information Security, or a related discipline, or equivalent work experience.
• Two or more years of experience in data analytics, data science, behavioral analytics, human risk measurement, or a related field.
• Demonstrated experience applying AI or machine learning tools and techniques to real-world problems.
• Experience using data, metrics, surveys, or other assessment methods to measure effectiveness and inform decision-making.
• Experience leveraging AI productivity tools such as MS Copilot.

Ideally, you ll also have

• Experience working within cybersecurity, information security, risk management, compliance, or technology environments.
• Proficiency with data analysis and visualization tools (e.g., Power BI, Excel, Python, or similar).
• Experience supporting security culture, human risk management, or behavioral change programs.
• Familiarity with behavioral science frameworks, human risk models, or security awareness measurement approaches.
• Experience building or deploying AI agents or other applied AI solutions.
• Experience with employee listening programs, culture surveys, sentiment analysis, or organizational diagnostics.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.