Cyber Risk Management Analyst

This is a fully remote position, open to applicants in Mexico.

📋 Description

• Evaluate, analyze, and implement effective security measures within customer environments.

• Collaborate with clients to comprehend security requirements and assess their current security posture.

• Offer guidance and recommendations on security practices, risk management strategies, and security policies.

• Design and establish security controls, policies, and procedures.

• Work alongside cross-functional teams to deploy firewalls, intrusion detection/prevention systems, access controls, and encryption technologies.

• Perform security assessments to identify vulnerabilities, risks, and potential security breaches.

• Assist with security audits and reviews, providing reports and findings for management decision-making.

• Keep abreast of the latest security threats, technologies, and best practices.

• Suggest improvements to enhance the organizational security posture.

• Contribute security expertise to the design and evaluation of IT infrastructure, systems, and applications.

• Partner with customers and vendors on security assessments, audits, and due diligence activities.

• Collaborate with Kyndryl Consultants, Architects, Project Managers, and cross-functional Technical Subject Matter Experts on customer projects.

⛳️ Requirements

• A minimum of 2+ years of experience in the implementation of information security.

• Strong grasp of security principles, practices, and technologies.

• Experience in managing risks associated with the processing, storage, or transmission of information.

• Proficient in conducting security and risk assessments using frameworks such as NIST, RMF, or Common Criteria.

• Exceptional written and verbal communication skills.

• Ability to convey complex security concepts to both technical and non-technical audiences.

• Capacity to adapt to evolving security threats and technologies.

• Commitment to staying updated with the latest security trends and best practices.

• Experience in assisting stakeholders with risk quantification and developing mitigation and remediation strategies.

• Understanding and application of the NIST Control Framework, Critical Security Controls, and relevant regulatory and compliance frameworks.

• Familiarity with cloud security, cyber resiliency/incident management, Zero Trust, network/EDGE security, IoT, and AI.

🏝️ Benefits

• A flexible and supportive work environment.

• Well-being support through Be Well programs covering financial, mental, physical, and social health.

• Personalized development goals with ongoing feedback.

• Access to innovative learning opportunities.

• Opportunities to earn certifications with Microsoft, Google, and Amazon.

• Coaching and practical experiences.

• Career pathing and professional development support.

• Employee referral program.