Sr. Cybersecurity Analyst, Risk Management Newark, CA

$119,600 - $164,450/Yr

Lucid Motors - Newark, CA

Full-time - Mid Level

Newark, CA

Transportation Equipment Manufacturing

About the position

The Senior Cybersecurity Analyst in Risk Management at Lucid is responsible for identifying, managing, and responding to cybersecurity risks. This role involves performing risk assessments, monitoring risk treatment activities, and producing metrics and reports for leadership. The position aims to ensure that risks are managed within defined tolerance levels while facilitating communication with stakeholders regarding risk acceptance and remediation strategies.

Responsibilities

• Perform cybersecurity risk assessments to identify cybersecurity risks and provide remediation recommendations.
• Assist in identifying, monitoring, reporting, and responding to cybersecurity risks through the development of action plans.
• Communicate identified risks to stakeholders and work with the business to determine whether to accept, remediate, or mitigate risks.
• Facilitate the development of action plans to manage risk within acceptable risk tolerance levels.
• Review risk management processes periodically for effectiveness and conduct regular cybersecurity risk assessments.
• Assist cybersecurity and management with defining acceptable risk tolerance levels.
• Provide guidance to key stakeholders in the development and implementation of risk treatment plans.
• Monitor and measure risk treatment activities and document metrics and reporting.

Requirements

• 5+ years of experience consulting or working in Cybersecurity and/or IT risk management.
• Bachelor's degree or equivalent industry experience; post Graduate degree is a plus.
• Strong understanding of information security risk management and risk assessment frameworks, processes, and risk rating levels.
• Experience performing security risk assessments utilizing established industry frameworks (ISO, NIST, etc.).
• Competency in cybersecurity frameworks including ISO 27001, NIST CSF, NIST 800-53, and PCI.
• Certified in one or more of the following: CRISC, CISA, CISM, CISSP, SANS GIAC Security Certifications, etc.
• Ability to communicate and present security risks concisely and effectively to various management and stakeholder groups.
• Ability to work well in a demanding, dynamic environment, and meet overall objectives.

Nice-to-haves

• Excellent interpersonal skills with the ability to communicate effectively verbally and in writing with all levels within the organization, including both technical and non-technical personnel.
• Automobile and/or manufacturing industry experience is a plus.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Life insurance
• Disability insurance
• Vacation
• 401k
• Equity program participation
• Discretionary annual incentive program