Risk Analyst II, Cybersecurity

American Bureau Of Shipping - Houston, TX

Full-time - Mid Level

Houston, TX

Professional, Scientific, and Technical Services

About the position

The Cyber Security Risk Analyst II plays a crucial role in ensuring the organization's information security by developing IT standards and policies, conducting risk assessments, and managing security vulnerabilities. This position involves collaboration with various departments to enhance the company's security posture and compliance with industry standards.

Responsibilities

• Perform risk analysis and intelligence information analysis to determine likely threats.
• Conduct information security risk assessments.
• Conduct information security audits, including security controls assessments and oversee the exception process.
• Prepare and deliver presentations to management teams and user groups.
• Conduct information security reviews of third parties in the supply chain.
• Provide responses to questions from other departments and third parties regarding the company's information security posture and controls.
• Assist in the design and support of internal cyber security education and awareness activities.
• Assist in the risk assessment and management of security vulnerabilities.
• Establish reasonable security guidelines and measures to protect data and systems.

Requirements

• Bachelor's Degree in Information Security or related field of study, or equivalent work experience.
• Minimum of seven (7) years of previous related work experience in IT operations and information security risk management.
• IT Security Industry certification (SANS, ISC2, etc.).
• Experience in Best Practices, Standards, and requirements from DFARS and NIST.
• Prior experience working in a global organization.
• Prior experience required in the Information Technology field of IT Security and/or Operation and IT Risk management.
• Clarity and conciseness in oral and written communications; demonstrated capability to produce effective presentations for delivery to both technical and non-technical audiences.
• Strong interpersonal skills to achieve process changes and departmental goals within a matrix organization.
• Understanding of basic network concepts such as TCP/IP, subnetting, firewalls, and other network administration protocols.
• Understanding of typical IT systems operations, configurations, and management.
• Experience working with vulnerability and risk management processes.
• Experience using a GRC Tool.
• Knowledgeable of the C&A or A&A process.

Benefits

• Medical insurance (PPO and HD)
• Dental and vision insurance
• Health Savings Account (HSA)
• Flexible Savings Account (FSA)
• Life insurance
• Accidental death and dismemberment insurance
• Disability leave programs
• Parental leave program
• Paid holidays
• Paid vacation time
• Employee Assistance Plan (EAP)
• 401K plan with a generous company match