Sr. Cybersecurity Analyst, Risk Management

$119,600 - $164,450/Yr

Lucid Motors - Newark, NJ

Full-time - Mid Level

Newark, NJ

Transportation Equipment Manufacturing

About the position

The Senior Cybersecurity Risk Management Analyst at Lucid Motors is responsible for identifying, managing, and responding to cybersecurity risks within a defined risk tolerance. This role involves performing regular cybersecurity risk assessments, monitoring risk treatment activities, and producing metrics and reports for leadership to ensure effective risk management practices are in place.

Responsibilities

• Perform cybersecurity risk assessments to identify cybersecurity risks and provide remediation recommendations.
• Assist in identifying, monitoring, reporting, and responding to cybersecurity risks through the development of action plans.
• Communicate identified risks to stakeholders and work with the business to determine whether to accept, remediate, or mitigate risks.
• Facilitate the development of action plans to manage risk within acceptable risk tolerance levels.
• Review risk management processes periodically for effectiveness and conduct regular cybersecurity risk assessments.
• Assist cybersecurity and management with defining acceptable risk tolerance levels.
• Provide guidance to stakeholders in the development and implementation of risk treatment plans based on risk acceptance criteria.
• Monitor and measure risk treatment activities and document metrics and reporting.

Requirements

• 5+ years of experience consulting or working in Cybersecurity and/or IT risk management.
• Bachelor's degree or equivalent industry experience; post Graduate degree is a plus.
• Strong understanding of information security risk management and risk assessment frameworks, processes, and risk rating levels.
• Experience performing security risk assessments utilizing established industry frameworks (ISO, NIST, etc.).
• Competency in cybersecurity frameworks including ISO 27001, NIST CSF, NIST 800-53, and PCI.
• Certified in one or more of the following: CRISC, CISA, CISM, CISSP, SANS GIAC Security Certifications, etc.
• Ability to communicate and present security risks concisely and effectively to various management and stakeholder groups.
• Ability to work well in a demanding, dynamic environment, and meet overall objectives.

Nice-to-haves

• Excellent interpersonal skills with the ability to communicate effectively verbally and in writing with all levels within the organization, including both technical and non-technical personnel.
• Automobile and/or manufacturing industry experience is a plus.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Life insurance
• Disability insurance
• Vacation
• 401k
• Equity program participation
• Discretionary annual incentive program