Job Overview
As a Risk and Governance Analyst, you will play a vital role in ensuring the confidentiality, integrity, and availability of
our organization's information assets. You will be responsible for identifying, assessing, and managing information
security risks, as well as implementing and maintaining governance frameworks to support the organization's
cybersecurity objectives.

 

Responsibilities  Conduct comprehensive risk assessments to identify potential vulnerabilities and threats to the
organization's information systems and data.
 Develop and implement risk mitigation strategies and controls to address identified risks and ensure
compliance with security standards and regulations.
 Establish and maintain information security governance frameworks, policies, and procedures to guide the
organization in managing and protecting sensitive information.
 Assist in developing and maintaining incident response plans to effectively respond to and recover from information security incidents.
 Promote security awareness and best practices among employees through training programs and
communication initiatives.
 Evaluate and recommend security tools and technologies to enhance the organization;ss security posture and
incident detection capabilities.
 Prepare reports and analysis on information security risks, incidents, and compliance status for
management and stakeholders.
 Work collaboratively with cross-functional teams, including IT, legal, compliance, and business units, to
address security risk and governance issues.
 Identify opportunities for continuous improvement in information security risk management processes and
practices.

 

Qualifications
 Bachelor’s degree in information security, Computer Science, related field or equivalent experience.
 Certified Risk and Information Systems Control (CRISC), CompTIA Security+, or equivalent certification is preferred.
 Proven experience in information security risk assessment, governance, and compliance.
 Strong knowledge of industry standards and frameworks such as ISO 27001, NIST, and HiTrust.
 Excellent analytical, problem-solving, and communication skills.
 Ability to work independently and collaboratively in a fast-paced environment.
 Attention to detail and a strong commitment to maintaining the confidentiality and integrity of information
assets.