Risk Analyst

Risk Analyst

PRIMARY DUTIES AND RESPONSIBILITIES:

· Monitors compliance with security policies, standards, guidelines, and procedures.

· Ensures security compliance with legal and regulatory standards.

· Participates with team(s) to gather a full understanding of project scope and business requirements.

· Maintains awareness of current business processes and their security risks.

· Assists in business impact analysis to ensure resources are adequately protected with proper security measures.

· Follows up on deficiencies identified in monitoring reviews, self-assessments, automated assessments, and internal and external audits to ensure that appropriate remediation measures have been taken.

· Runs security analysis reports using commercial tools or custom scripts and documents gaps.

· Updates and maintains documentation for a global risk framework (a single view of the information security risk profiles and tolerance.)

· Captures, maintains, and monitors information security risk in one repository.

· Gathers, organizes, and maintains data for reporting.

· Assists/performs in security assessments and performs security attestations.

· Inspects security logs to uncover possible security violations (e.g., break-ins, unauthorized activity).

· Checks existing accounts and data access permission requests against documented authorizations.

· Supports the coordination of all IT internal and external assessment components.

· Provides responsive support and guidance for problems found during normal working hours as well as outside normal working hours.