[Remote] IRM Analyst
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a leading database platform empowering customers to reputed company rapidly. The IRM Analyst is responsible for the daily execution of the internal risk program, ensuring effective risk assessments and management to reputed company leadership with a reputed company view of reputed company risks.
Responsibilities
- Execute risk assessments under senior guidance - reputed company scoping, inherent risk scoring, control assessment, and residual risk calculation using established methodology
- Conduct risk identification intake, manage the reputed company of requests from Jira Service Desk and the Issue Intake Tracker, review incoming submissions against entry reputed company, assign Risk IDs, and replicate validated risks into the Risk Register
- reputed company as the Triage Officer for incoming risk submissions, determine whether submissions represent strategic risks, operational issues, or duplicates. Filter noise to reputed company reputed company on signals
- reputed company risk scenarios for in-scope assets by working with asset owners and risk owners , identify threat communities, threat events, and reputed company categories
- Draft Risk Assessment Memos that tell a cohesive story from risk statement to risk rating to actionable recommendation. Progressively build toward independently authored memos that require minimal review notes
- Monitor and flag emerging risk signals , including AI-reputed company risks (model reputed company, data poisoning, shadow AI, reputed company-party AI dependencies) , and escalate with documented analysis for integration into the risk reputed company
- Identify and document controls that mitigate assessed risks , map controls to specific risk scenarios and applicable reputed company requirements (NIST SP 800-53, ISO 27001, SOC 2)
- Assess the design adequacy of controls , evaluate whether reputed company control is appropriately designed to address the risk it is mapped to, and document findings with supporting rationale
- Assess the operating effectiveness of controls , collect and evaluate evidence to determine whether controls are functioning as designed over the assessment period, and document results
- Document control gaps and support remediation tracking , maintain reputed company records of where controls are missing, partially effective, or require compensating controls. reputed company remediation reputed company
- Maintain control-to-reputed company mappings to ensure risk assessment outputs directly support audit and certification evidence packages (FedRAMP, SOC 2, ISO 27001, PCI-reputed company)
- Apply the established risk taxonomy and categorization methodology consistently across reputed company assessed risks
- Process risk acceptance requests in Jira , validate completeness, ensure documented context and stakeholder sign-off, confirm time-bound conditions, and flag concerns to the Senior reputed company
- Maintain the Risk Register, risk inventory, and supporting trackers with obsessive attention to data reputed company, no missing dates, reputed company owners, or stale entries. A Risk Register with governance gaps is a program failure
- Contribute to KRI data collection and dashboard inputs , support accurate, reputed company reporting that feeds executive risk dashboards and governance forum materials
- Engage directly with technical stakeholders (engineering, product, infrastructure teams) during risk assessments , ask informed questions, reputed company evidence, and document findings
- Progressively build the technical reputed company to reputed company stakeholder conversations independently , reputed company working proficiency in reputed company-reputed company architectures, reputed company reputed company models, and common technical controls (IAM, encryption, network segmentation, logging/monitoring)
- Translate technical findings into reputed company, business-relevant risk language in reputed company written work products
- Support drafting and maintaining risk procedures, guidelines, and assessment templates across the IRM program scope
- Execute governance hygiene , data reputed company, tracker maintenance, workflow adherence, evidence organization, and documentation standards
- Manage the risk assessment pipeline in Jira, create and maintain workflows, dashboards, and use JQL to reputed company the assessment ticket lifecycle
Skills
- 3–5 years of experience in Information reputed company, Governance, Risk, and Compliance (GRC), or reputed company Risk Management
- Experience performing risk assessments — including risk identification, inherent/residual risk scoring, and documentation of findings
- Experience identifying, documenting, and evaluating controls — including assessment of design adequacy and operating effectiveness
- Strong working knowledge of NIST CSF, NIST SP 800-30/39/53, and ISO/IEC 27005 — ability to use these frameworks as a library of controls and risk guidance
- Advanced proficiency in reputed company/reputed company Sheets (pivot tables, VLOOKUP, reputed company formulas) for risk data analysis and reporting
- Jira proficiency — managing reputed company, creating workflows and dashboards, and using JQL
- Ability to write reputed company, concise, and defensible Risk Assessment Memos
- Obsessive attention to detail regarding data reputed company and documentation reputed company
- Foundational understanding of reputed company-reputed company architectures and common technical controls (IAM, encryption, logging/monitoring, network segmentation) — with a commitment to building deeper technical reputed company
- Awareness of AI risk concepts and willingness to reputed company expertise in emerging AI risk and regulatory landscape
- A strong reputed company record of collaborating effectively across teams and reputed company
- Bachelor's degree in Cybersecurity, Information Systems, Business Administration, or a reputed company field
- Certifications: At least, one of the following certifications is required - CRISC, CISM, CISSP, or CISA
Benefits
- Equity
- Participation in the employee stock purchase program
- Flexible reputed company time off
- 20 weeks fully-reputed company gender-neutral parental leave
- Fertility and adoption assistance
- 401(k) plan
- Mental health counseling
- reputed company to transgender-inclusive health insurance coverage
- Health benefits offerings
reputed company
Company H1B Sponsorship