Cyber Risk and Compliance Tool Administrator/IT Risk Analyst

Cyber Risk And Compliance Tool Administrator/It Risk AnalystLocation: Cincinnati, OH/Boca Raton, FL/Charlotte, NC/Portland, OR/Chicago, IL/San Jose, CA (Need locals)Duration: 6+ months ContractThe Cyber Risk And Compliance Tool Administrator / It Risk Analyst plays a critical role in maintaining and enhancing the IT risk management practice at the client. This individual will not only perform and manage assessments of potential cyber risk exposures and prepare actionable risk reporting but also assist in the administration of governance, risk, and compliance (GRC) tools such as Archer, ServiceNow, and MetricStream. The analyst is responsible for ensuring that the GRC platform is effectively configured, customized, and utilized to support client’s cyber risk management processes.By cultivating strong working relationships with leaders across the enterprise, the Cyber Risk And Compliance Tool Administrator / It Risk Analyst will conduct evaluations of the cyber risk posture and advise on strategies to reduce risk in line with established risk appetites.

The role demands strategic thinking, intellectual curiosity, and the ability to operate in undefined problem spaces, shaping and refining the risk program with both autonomy and empowerment from senior leadership.Top Must Haves:Risk management experience: previous experience working with and reviewing cyber risk assessments.Familiarity with cyber security frameworks, such as NIST-CSF.Deep experience with GRC tools (administrative, power user, user) and their application in cyber risk management.Proficiency in administering and customizing GRC platforms like Archer, ServiceNow, and MetricStream.Requirements:Prefer 5-10 years experience in governance, risk, and complianceJob field related certification(s), CISSP/CISA/CRISC (preferred but not required)Previous experience as a compliance analyst in a related field.In-depth knowledge of industry compliance requirements and standards.Proficiency in compliance management software, Archer, ServiceNow, MetricStream, etc.Ability to accurately complete applications for compliance certification.Ability to effectively train employees.Exceptional communication and interpersonal skills.Understanding of regulatory frameworksRequirements analysisAbility to develop standards to maintain legal complianceQuality managementCritical thinking and problem-solving skillsOrganization, project management, and strategic planning skillsFamiliarity with process improvement methodologyAttention to detailAbility to embrace complexity.Demonstrated expertise in configuring, customizing, and managing GRC platforms such as Archer, ServiceNow, MetricStream, etc., to support cyber risk management activities.Experience in automating cyber risk management tasks within GRC tools to enhance efficiency and accuracy.Capability to develop and maintain documentation for GRC tool usage, including administration guides, user training materials, and standard operating procedures.Skill in integrating GRC tools with other IT systems to provide a holistic view of the organization's risk posture.Ability to oversee user access management within GRC platforms, ensuring appropriate roles and permissions are aligned with segregation of duties.Proficiency in generating and interpreting reports and dashboards within GRC platforms to inform cyber risk management decisions.