Senior Cyber Security and Technology Risk Analyst

A US private investment firm is seeking a Senior Cyber Security and Technology Risk Analyst professional to help strengthen and maintain the organization's cybersecurity posture. This role will work directly with the Head of Technology and serve as the primary cybersecurity resource supporting the firm's operations.

The position will be responsible for cybersecurity governance, vulnerability management, incident response, vendor risk oversight and technology risk management. The individual will also provide limited support for critical technology operations and operational resilience initiatives.

This role is located in Luxembourg.

Key Responsibilities for the Senior Cyber Security and Technology Risk Analyst role :

Cyber Security Governance & Risk

• Support the development, implementation, and ongoing maintenance of cybersecurity policies, standards, procedures, and controls.
• Support compliance with applicable cybersecurity, technology risk, and operational resilience requirement and internal security standards.
• Monitor and improve the organization's overall cybersecurity posture across systems, networks, cloud platforms, applications, and third-party services.
• Maintain cybersecurity risk registers and remediation plans and track risk mitigation activities.
• Prepare cybersecurity metrics, risk reporting, and status updates for senior management.

Security Operations & Vulnerability Management

• Conduct or coordinate penetration testing, vulnerability assessments, and remediation tracking.
• Review security findings, prioritize risks, and work with internal stakeholders and vendors to implement remediation plans.
• Support incident response activities, including detection, triage, investigation, containment, recovery, and lessons learned.
• Assist with access management, endpoint security, logging and monitoring security awareness initiatives, and compliance activities.

Vendor Risk management

• Manage ongoing vendor risk assessments, including security questionnaires, control reviews, due diligence documentation, and remediation follow-up.

• Evaluate the cybersecurity posture of third-party service providers and support outsourcing oversight activities.

Operational Resilience

• Support business continuity, disaster recovery, and operational resilience testing activities.
• Participate in incident response exercises, tabletop testing, and recovery validation activities.

Technology Operations Support

• Provide secondary support for critical technology operations, including monitoring scheduled processing activities, investigating exceptions, troubleshooting failures, and escalating issues, as required.

Collaboration & Documentation

• Partner directly with the Head of Technology on cybersecurity initiatives, incident response planning, risk reporting, and technology governance.
• Maintain documentation for security processes, vendor reviews, operational procedures, and incident response workflows.

Qualifications for the Senior Cyber Security and Technology Risk Analyst

Experience:

• 8-12 years of experience in cybersecurity, information security, technology risk, security operations or related disciplines within financial services, asset management, banking, or private equity.

Technical Knowledge

• Working knowledge of cybersecurity frameworks and standards including NIST, ISO27001, CIS Controls, and technology risk management practices.
• Experience supporting vulnerability management programs, security assessments, penetration testing activities, and remediation workflows.
• Experience with incident response, security monitoring, threat detection and control validation activities.
• Familiarity with cloud security concepts, endpoint protection, network security, and identity and access management.
• Familiarity with vendor risk assessment processes and third-party security assessments.

Communication & Business Skills

• Strong verbal and written communication skills with the ability to work effectively with senior leadership, business stakeholders, external vendors, and auditors.
• Ability to prioritize multiple initiatives while maintaining a strong risk-management mindset.

Technical Tools

• Working knowledge of Python with the ability to automate security processes, analyze security data, and improve operational efficiency, is a plus.

Certifications

• Relevant cybersecurity certifications such as CISSP, CISM, Security+, CySA+, CEH, GSEC, SSCP, CISSP, or equivalent security certifications are preferred.

#IT