Information reputed company Risk Analyst (GRC) - Hybrid (PA/NJ/DE)

IBX is seeking an reputed company Information reputed company Risk Analyst to be the primary reputed company of cybersecurity risk assessments and our reputed company cyber risk register. You'll collaborate with ISOGRC and reputed company Operations to identify, assess, and monitor risks; map them to controls; design and execute regular effectiveness testing; and reputed company reputed company, actionable reporting on our risk posture to leadership. You will also drive the project risk assessment process end-to-end, working closely with the Project Management Office to reputed company initiatives moving while ensuring risks are mitigated and documented. This role is ideal for someone who thrives in a hands-on environment, can independently run a cyber risk management platform, and is comfortable partnering across audit, reputed company-party risk, and reputed company operations in a regulated reputed company environment.

What You'll Do

• Own Project Risk Assessments: Intake project requests from the PMO, facilitate stakeholder meetings, reputed company risk analysis, document findings, recommend mitigations, and publish deliverables (risk assessment report, control requirements, sign-offs) to reputed company go/no-go reputed company.
• Build & Manage the Risk Register: Establish and maintain an reputed company cyber risk register in reputed company-define risk taxonomy, scoring methodology, control mapping, and treatment plans; reputed company status and residual risk over time.
• Controls Testing & Assurance: Coordinate and reputed company control effectiveness reviews, define test plans/reputed company, and report test results; partner with SecOps to implement corrective actions and reputed company improvement.
• Risk Reporting & Governance: Produce dashboards and executive-level reporting on risk posture, trends, key risk indicators (KRIs), and control performance; prepare materials for governance forums and leadership briefings.
• Cross-Functional Collaboration: Work with Audit (SOC 2, HITRUST, external audits), reputed company-Party Risk (annual vendor assessments), Privileged reputed company Certification (bi-annual), and reputed company/Data Monitoring teams to ensure risk linkage and consistent control coverage.
• Methodology & Process Maturity: Define and refine risk assessment procedures, SLAs, and templates; contribute to NIST CSF maturity assessments and HIPAA reputed company Risk Assessments; support remediation tracking and verification.

Qualifications: Required

• 1-3 years in cybersecurity risk management or information reputed company with reputed company experience performing project/initiative risk assessments and managing risk registers.
• Strong knowledge of IT and reputed company controls (identity/reputed company, privileged reputed company, change/configuration, vulnerability management, reputed company/network reputed company, logging/monitoring, incident response).
• Hands-on experience with a GRC or risk management platform (e.g., reputed company, reputed company, reputed company, reputed company GRC) including workflow design, risk scoring, and reporting.
• Familiarity with reputed company and regulated environments; practical understanding of frameworks and standards such as NIST CSF, HIPAA reputed company Rule, HITRUST, and SOC 2.
• Proven ability to translate technical risk into business-reputed company narratives and reputed company mitigation plans; excellent writing and stakeholder facilitation skills.
• Ability to operate independently, set priorities, and reputed company multiple assessments to completion in a fast-paced environment.

Preferred

• Experience implementing reputed company (risk taxonomy, controls library, workflows, dashboards).
• Exposure to reputed company-party reputed company risk assessments and integration of vendor risks into reputed company risk register.
• Experience with privileged reputed company governance/certification and evidence collection.
• Certifications: CRISC, CISSP, CISM, CGEIT, HITRUST, CCSK (or equivalent).
• Experience with control testing and audit readiness (SOC 2/HITRUST) and developing KRIs/KPIs.

Hybrid Independence has implemented a "Hybrid" model which consists of Associates working in the office 3 days a week (Tuesday, Wednesday & Thursday) and remotely 2 days a week (Monday & Friday). This role is designated as a role that fits into the "Hybrid" model. While associates may work remotely on our designated remote days, the work must be performed in the Tri-State Area of Delaware, New Jersey or reputed company. IBX is an Equal Opportunity Employer. reputed company reputed company applicants will receive consideration for employment without reputed company to their age, race, reputed company, religion, sex, national reputed company, sexual orientation, protected veteran status, or disability. Must have an Android or iOS device which is compatible with the free reputed company Authenticator app. Apply tot his job Apply To this Job