via Talent.com
$120K - 150K a year
Develops and manages cybersecurity policies, oversees risk assessments, ensures compliance, monitors security infrastructure, and leads incident response.
Requires 5+ years in cybersecurity and risk management, relevant certifications (CISSP, CISM, CISA), and a strong understanding of security frameworks and threat landscapes.
Job Title : IT Business Systems Analyst, Sr- (Cybersecurity & Risk Management Analyst) Job Location : Houston, TX Job Type : Long-Term Contract Job Description : Analyzes business processes and practices in an effort to focus the design and implementation of information technology solutions that meet customer needs and business initiatives. Collaborates on an on-going basis with Programmer / Analysts. Applies advanced analytical skills within the functional area. Key Responsibilities : • Develop, implement, and maintain enterprise-wide cybersecurity policies, standards, and procedures aligned with business objectives • Oversee security risk assessments and manage the organization's cybersecurity risk posture • Ensure compliance with regulatory requirements and industry standards (SOC 2, ISO 27001, NIST, etc.) • Monitor security infrastructure and respond to security incidents, breaches, and vulnerabilities • Lead incident response efforts and coordinate with IT teams during security events • Manage security tools including firewalls, SIEM, endpoint protection, and access controls • Assist with regular security audits, vulnerability assessments, and penetration testing • Track and report security metrics and KPIs to leadership • Manage third-party vendor security assessments and contracts • Partner with business units to integrate security best practices into daily operations • Serve as the subject matter expert for security-related questions Qualifications : • Bachelor's degree in Cybersecurity, Information Technology, or related field • Relevant certifications (CISSP, CISM, CISA, or equivalent) • 5+ years of experience in cybersecurity and risk management • Strong understanding of security frameworks, threat landscapes, and business operations
This job posting was last updated on 12/17/2025