Risk Analyst and Manager

August 20, 2024

CRG Solutions

San Pedro

OTHER

Risk Analyst and Manager
The Risk Analyst and Manager will play a crucial role in safeguarding the organization's security posture by identifying, assessing, and mitigating potential risks. This position will be responsible for overseeing security operations center (SOC) activities and managing the technology asset governance (TAG) program.
Key Responsibilities

Threat Assessment and Management:
- Monitor and analyze threat intelligence to identify emerging risks and vulnerabilities.
- Conduct risk assessments and develop mitigation strategies to protect the organization's assets.
- Stay up-to-date with industry best practices and regulatory requirements.
Security Operations Center (SOC) Management:
- Oversee the daily operations of the SOC, ensuring efficient and effective threat detection and response.
- Collaborate with security analysts to investigate and respond to security incidents.
- Develop and maintain incident response plans and procedures.
Technology Asset Governance (TAG) Program:
- Manage the TAG program to ensure compliance with asset management policies and procedures.
- Track and inventory IT assets, including hardware, software, and cloud resources.
- Conduct regular audits to identify and address asset vulnerabilities.
Risk Reporting and Communication:
- Prepare regular risk assessments and reports for management.
- Communicate effectively with stakeholders to raise awareness of security risks and mitigation strategies.

Qualifications

Bachelor's degree in computer science, information security, or a related field.
5+ years of experience in information security or risk management.
Strong understanding of security frameworks and standards (e.g., NIST, ISO 27001).
Experience with security tools and technologies (e.g., SIEM, IDS, IPS, vulnerability scanners).
Excellent analytical and problem-solving skills.
Strong communication and interpersonal skills.
Ability to work independently and as part of a team.

Desired Skills

Certification in a security-related field (e.g., CISSP, CISM, CISA).
Experience with cloud security and compliance frameworks (e.g., AWS, Azure, GCP).
Knowledge of scripting languages (e.g., Python, Power Shell