Cyber Security Analyst

MRP-Global is seeking a Cybersecurity Risk Management Analyst to join an international end user in the United States. The role focuses on conducting cybersecurity and third-party risk assessments, evaluating security controls, recommending risk mitigation strategies, and supporting compliance and risk reporting activities.

Responsibilities:

• Conduct cybersecurity and third-party/vendor security risk assessments
• Identify and evaluate cybersecurity risks across projects, vendors, and business processes
• Assess security controls using industry standards, frameworks, and best practices
• Recommend appropriate risk mitigation and remediation strategies
• Advise stakeholders on security, regulatory, and compliance requirements
• Document assessments, findings, risks, and remediation activities
• Track and report risk assessment status to relevant stakeholders
• Review security policy exceptions and provide recommendations
• Research emerging security technologies, architectures, and industry practices
• Support other cybersecurity risk management activities as required

Requirements:

• • Proven experience in cybersecurity risk management, IT security controls, or security audit
• • Experience with third-party/vendor risk assessments
• • Knowledge of frameworks and standards such as NIST CSF, ISO 27001, SOC 1/SOC 2, PCI-DSS, GDPR, SOX, and related privacy regulations
• • Strong communication, stakeholder management, analytical, and problem-solving skills
• • Ability to work independently and effectively balance business requirements with cybersecurity risk
• Open to candidates across the US
• • Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or a related field preferred
• • Relevant certifications such as CISSP, CISM, CISA, CRISC, Security+ or GSEC are preferred