Cyber Security Analyst
Core
Conduct structured asset characterization, risk exposure assessment, and validate security controls against regulatory frameworks (NIS2, DORA, CRA, ISO 27001, CIS) to define remediation plans and monitor execution.
Role type
Senior Cyber Security Analyst (Risk & Compliance)
Builds
Risk assessment reports, security control validation plans, and remediation roadmaps for regulated environments.
Domain
Cybersecurity, Risk Management, Regulatory Compliance (NIS2, DORA, CRA)
Required skills
Risk analysis methodologies (OCTAVE, FAIR, ISO 27005, NIST RMF), Security control selection and validation, Regulatory framework knowledge (NIS2, DORA, CRA, ISO 27001, CIS), Security solution evaluation (firewall, EDR/XDR, SIEM/SOAR, IAM), Remediation planning, Stakeholder reporting, English (fluent)
Preferred skills
Cloud security analysis (AWS, GCP), GRC tools (OneTrust, ServiceNow GRC, Archer, AI.ESRA, Balbix), TPRM tools (Panorays, Bitsight, Security Scorecar), OT/IoT security
Technologies
NIS2, DORA, Cyber Resilience Act, ISO 27001, CIS Controls, NIST CSF 2.0, SP 800-53, OCTAVE, FAIR, AWS, GCP, OneTrust, ServiceNow GRC, Archer, AI.ESRA, Balbix, Panorays, Bitsight, Security Scorecar
Responsibilities
Perform asset characterization and dependency mapping; Identify and classify risk scenarios; Select and validate technical security controls; Define structured remediation plans with priorities and timelines; Monitor control execution and report to stakeholders; Support updates to organizational risk posture.
Seniority
Mid-Senior, hands-on IC