This resource will execute repeatable software risk assessments, support vulnerability-management activities, collect evidence, document findings, and track remediation items. The analyst will build complete assessment packages and reporting outputs for onshore leadership, while final risk ratings, approvals, and risk-acceptance decisions remain with the onshore team

Day-to-Day Responsibilities

Conduct cybersecurity risk assessments across business applications, platforms, and technology services.

Identify control gaps, vulnerabilities, security concerns, and required remediation actions.

Build and maintain scenario-based cyber risk statements.

Collect evidence and stakeholder comments supporting assessment conclusions.

Coordinate working sessions with application and system owners.

Track remediation items, open assessments, documentation gaps, and roadblocks.

Support vulnerability validation and remediation tracking.

Maintain assessment trackers and reporting in Excel.

Upload artifacts to Share Point or the designated repository for audit readiness.





Support migration of assessment processes into Onspring.

Produce weekly status updates, leadership summaries, and steering-meeting reporting.

Monitor Cyber Key Risk Indicators and emerging risk signals.

Must-Have Qualifications

3+ years of experience in cyber risk, GRC, software security assessments, vulnerability management, or technology risk.

Experience assessing applications, platforms, or systems for security gaps.

Strong documentation and evidence-collection skills.

Experience tracking vulnerabilities, remediation actions, and assessment findings.

Ability to write clear, defensible risk statements and supporting rationale.

Strong Excel skills, including assessment trackers, reporting, and rollups.

Experience working directly with application owners and technical stakeholders.

Clear written English and the ability to present concise status updates.

Availability for significant U.S. Eastern Time overlap

📌 Cyber Risk Management Analyst (Janos)
🏢 ITMC Systems
📍 Janos