Risk Assessment Analyst ( Cyber Security)

Role & responsibilities

• Assist in conducting Information Security Risk Assessments, asset classification, threat/vulnerability identification, and risk scoring.
• Support preparation and maintenance of Risk Registers and Risk Treatment Plans.
• Perform GRC and compliance assessments against ISO 27001, NIST, CIS, and applicable regulatory requirements.
• Review security policies, procedures, and controls and identify gaps.
• Perform security configuration reviews of firewalls, servers, network devices, IAM, databases, cloud, and security solutions.
• Validate configurations against CIS Benchmarks, vendor best practices, and organizational standards.
• Prepare assessment reports, compliance matrices, configuration review reports, and remediation trackers.
• Coordinate with technical teams for evidence collection, remediation tracking, and finding validation.

Required Skills

• Basic knowledge of Cybersecurity, Risk Management & GRC
• Understanding of ISO 27001, NIST and CIS
• Knowledge of network, server, firewall, IAM and cloud security
• Basic understanding of security configuration and hardening
• Good analytical, documentation and report-writing skills

Preferred Certifications

ISO 27001 | Lead Auditor/Implementor | CEH