Technology & Cybersecurity Risk Management Analyst

Finteksoft Inc is seeking a Technology & Cybersecurity Risk Management Analyst to help strengthen technology risk and cybersecurity governance initiatives. This onsite role in Plano, TX focuses on assessing cybersecurity risk, evaluating security controls, and translating findings into clear reporting and remediation tracking.

Role Summary

The analyst will support cybersecurity risk assessment activities by conducting evaluations of security controls, mapping risks to frameworks and control requirements, and reporting risk status and remediation progress. Work will include maintaining governance records and continuously improving technology risk management processes.

Key Responsibilities

• Conduct technology and cybersecurity risk assessments, including risk intake and risk evaluation.
• Use NIST, COBIT, and ISO 27001 to assess security risks and define control requirements.
• Identify and document inherent risks, residual risks, emerging threats, and control gaps.
• Evaluate security control design and operating effectiveness.
• Map identified risks to applicable security controls, policies, and compliance frameworks.
• Run control walkthroughs and collaborate with control owners and business stakeholders.
• Develop risk mitigation recommendations and monitor remediation activities through closure.
• Maintain risk registers, assessment documentation, control evidence, and governance records.
• Prepare risk reports, dashboards, and presentations for management and leadership.
• Support continuous improvement of technology risk management processes and procedures.

Requirements

• 7 years of experience in Technology Risk, Cybersecurity Risk Management, IT Risk, GRC, IT Audit, or Information Security.
• Hands-on knowledge working with NIST, COBIT, and ISO 27001 frameworks.
• Practical understanding of cybersecurity risk assessments, security controls, and risk mitigation.
• Experience identifying control gaps and evaluating control effectiveness.
• Understanding of risk management concepts including inherent risk, residual risk, and remediation tracking.
• Experience interacting with control owners, stakeholders, and cross-functional teams.
• Strong documentation, analytical, communication, and problem-solving skills.
• Proficiency in Microsoft Excel, Microsoft Word, and Microsoft PowerPoint.
• Familiarity with ServiceNow GRC or other GRC tools is preferred.
• Exposure to Microsoft Copilot is an added advantage.
• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field, or equivalent practical experience.

Tools and Technologies

• NIST
• COBIT
• ISO 27001
• NIST CSF
• NIST SP 800-53
• Microsoft Excel
• Microsoft Word
• Microsoft PowerPoint
• ServiceNow GRC
• Microsoft Copilot

Compensation and Work Location

• Location: Plano, TX (onsite)
• Pay: USD 45 - 55 per hour

Benefits

• Dental insurance

Application Questions

• Do you have hands-on experience using Microsoft Excel for risk tracking, risk registers, assessment documentation, reporting, Pivot Tables, VLOOKUP/XLOOKUP, or dashboards?
• Do you have practical experience using NIST frameworks (NIST CSF or NIST SP 800-53) for cybersecurity risk assessments, security control reviews, or gap assessments?
• Do you have hands-on experience working with COBIT and ISO 27001 frameworks for IT governance, risk assessments, control mapping, or compliance audits?