FIND YOUR IT JOB

Senior Cyber Risk Analyst

Permanent

Enso Recruitment is currently working with a brand-new US FDI organisation that is setting up in Belfast.

This is a well-established global business that has been operating for over 60 years in the technology manufacturing and engineering sector in the US and is now setting up a new site in Belfast to focus on leading transformational programs and projects within their business.

We are looking for an IT Risk Analyst III who can help grow the IT Risk and Compliance Program within the Information Security Team.  The ideal candidate will have experience working with multiple compliance frameworks and regulations including CCPA, FAR/DFAR, GDPR, IATF, ISO, NIST, and PCI-DSS. 

Key Responsibilities:

• Work closely with IT team members to ensure the appropriate implementation of policy and procedure best practices and NIST 800-171 controls
• Conduct gap assessments against data protection policies and standards
• Research processes with business units and service owners to evaluate inherent risks
• Create and maintain risk and compliance tracking documentation, including executive reporting of open risks and associated remediation plans
• Establish workplans for targeted POA&M items and record information in tracking tools
• Improve documentation and develop policy review and communications processes
• Identify areas of policy nonconformance and make recommendations for improvements
• Develop and conduct training sessions and provide guidance on requirements
• Identify opportunities for automation and streamlining compliance efforts

Essential Business Experience and Technical Skills:

• A Bachelor’s degree in Information Systems/Computer Science or related
• Minimum of 5 years’ experience in IT audit, information security, or risk management
• Possess industry-specific knowledge regarding security related regulations including FAR/DFAR, GDPR, IATF and NIST
• Proven experience with control monitoring principles and practices
• Demonstrated ability to conduct assessments independently, evaluate internal controls, perform technical analysis, and solve problems
• Excellent written and communication skills that can be applied to all levels of management
• Ability to work with complex excel spreadsheets
• Comfortable working independently and collaboratively to achieve business outcomes
• Preferred:
  • InfoSec related training or certifications, such as CISM or CCSP
  • Experience with GRC automation software, ServiceNow, or other workflow tools
  • Working knowledge of security frameworks such as CMMC, ISO, SOX, NIST CSF and NIST 800 series
  • Understanding of manufacturing or semiconductor operations