... Cyber Risk Assessor III leads cybersecurity risk assessments, control evaluations, and policy ... Key Responsibilities Governance, Risk Assessment & Management * Lead cybersecurity risk assessments ...
Quick apply
... Cyber Risk Assessor III leads cybersecurity risk assessments, control evaluations, and policy ... Key Responsibilities Governance, Risk Assessment & Management * Lead cybersecurity risk assessments ...
... Cyber Risk Assessor III leads cybersecurity risk assessments, control evaluations, and policy ... Key Responsibilities Governance, Risk Assessment & Management * Lead cybersecurity risk assessments ...
Quick apply
... Cyber Risk Assessor III leads cybersecurity risk assessments, control evaluations, and policy ... Key Responsibilities Governance, Risk Assessment & Management * Lead cybersecurity risk assessments ...
... Cyber Risk Assessor III leads cybersecurity risk assessments, control evaluations, and policy ... Key Responsibilities Governance, Risk Assessment & Management * Lead cybersecurity risk assessments ...
Quick apply
... Cyber Risk Assessor III leads cybersecurity risk assessments, control evaluations, and policy ... Key Responsibilities Governance, Risk Assessment & Management * Lead cybersecurity risk assessments ...
Lead, Information Risk and GRC
Miami, FL · On-site
Security due diligence (cyber risk assessments); Continuous monitoring and reassessment; Offboarding and risk closure * Define and enhance third-party risk methodologies, including; Risk scoring ...
Lead, Information Risk and GRC
Miami, FL · On-site
Security due diligence (cyber risk assessments); Continuous monitoring and reassessment; Offboarding and risk closure * Define and enhance third-party risk methodologies, including; Risk scoring ...
Lead, Information Risk and GRC
Miami, FL · On-site
Security due diligence (cyber risk assessments); Continuous monitoring and reassessment; Offboarding and risk closure * Define and enhance third-party risk methodologies, including; Risk scoring ...
Lead, Information Risk and GRC
Miami, FL · On-site
Security due diligence (cyber risk assessments); Continuous monitoring and reassessment; Offboarding and risk closure * Define and enhance third-party risk methodologies, including; Risk scoring ...
Provide independent second-line oversight of cyber and information security risk internally and ... Independent judgment with strong analytical and risk assessment skills. The outlined above is ...
Provide independent second-line oversight of cyber and information security risk internally and ... Independent judgment with strong analytical and risk assessment skills. The outlined above is ...
Risk Manager
Miami, FL · On-site
Provide independent second-line oversight of cyber and information security risk internally and ... Independent judgment with strong analytical and risk assessment skills. The outlined above is ...
Risk Manager
Miami, FL · On-site
Provide independent second-line oversight of cyber and information security risk internally and ... Independent judgment with strong analytical and risk assessment skills. The outlined above is ...
Provide independent second-line oversight of cyber and information security risk internally and ... Independent judgment with strong analytical and risk assessment skills. The outlined above is ...
Quick apply
Provide independent second-line oversight of cyber and information security risk internally and ... Independent judgment with strong analytical and risk assessment skills. The outlined above is ...
Cyber Resiliency and Test Engineer - SME
FL · On-site
Experience conducting Mission Based Cyber Risk Assessments (MBCRAs). * Experience in planning and conducting cyber test. * Experience establishing cybersecurity guidelines and practices at the DoW or ...
Cyber Resiliency and Test Engineer - SME
FL · On-site
Experience conducting Mission Based Cyber Risk Assessments (MBCRAs). * Experience in planning and conducting cyber test. * Experience establishing cybersecurity guidelines and practices at the DoW or ...
Experience conducting Mission Based Cyber Risk Assessments (MBCRAs). * Experience in planning and conducting cyber test. * Experience establishing cybersecurity guidelines and practices at the DoW or ...
Quick apply
Experience conducting Mission Based Cyber Risk Assessments (MBCRAs). * Experience in planning and conducting cyber test. * Experience establishing cybersecurity guidelines and practices at the DoW or ...
Experience conducting Mission Based Cyber Risk Assessments (MBCRAs) * Knowledge in the Cybersecurity Assess and Authorize (A&A) process to support DoD acquisition programs through the Risk Management ...
Quick apply
Experience conducting Mission Based Cyber Risk Assessments (MBCRAs) * Knowledge in the Cybersecurity Assess and Authorize (A&A) process to support DoD acquisition programs through the Risk Management ...
Cyber Resiliency Test Engineer - SME - TGE
FL · On-site
Experience conducting Mission Based Cyber Risk Assessments (MBCRAs) * Knowledge in the Cybersecurity Assess and Authorize (A&A) process to support DoD acquisition programs through the Risk Management ...
Cyber Resiliency Test Engineer - SME - TGE
FL · On-site
Experience conducting Mission Based Cyber Risk Assessments (MBCRAs) * Knowledge in the Cybersecurity Assess and Authorize (A&A) process to support DoD acquisition programs through the Risk Management ...
Experience conducting Mission Based Cyber Risk Assessments (MBCRAs). * Experience in planning and conducting cyber test. * Experience establishing cybersecurity guidelines and practices at the DoW or ...
Experience conducting Mission Based Cyber Risk Assessments (MBCRAs). * Experience in planning and conducting cyber test. * Experience establishing cybersecurity guidelines and practices at the DoW or ...
Experience conducting Mission Based Cyber Risk Assessments (MBCRAs). Experience in planning and conducting cyber test. Experience establishing cybersecurity guidelines and practices at the DoW or ...
Experience conducting Mission Based Cyber Risk Assessments (MBCRAs). Experience in planning and conducting cyber test. Experience establishing cybersecurity guidelines and practices at the DoW or ...
IT Risk Associate
Clearwater, FL · On-site
Document risk assessment findings, recommendations, and remediation plans for review by senior ... with the Cyber Risk Management Framework. * Support maintaining and improving the governance ...
IT Risk Associate
Clearwater, FL · On-site
Document risk assessment findings, recommendations, and remediation plans for review by senior ... with the Cyber Risk Management Framework. * Support maintaining and improving the governance ...
Document risk assessment findings, recommendations, and remediation plans for review by senior ... with the Cyber Risk Management Framework. * Support maintaining and improving the governance ...
Document risk assessment findings, recommendations, and remediation plans for review by senior ... with the Cyber Risk Management Framework. * Support maintaining and improving the governance ...
Senior Manager - ServiceNow
Miami, FL · On-site
Includes design of the cyber organization, governance, and risk assessments. Qualifications Required: * BA/BS Degree in Computer Science, Cyber Security, Information Security, Engineering ...
Senior Manager - ServiceNow
Miami, FL · On-site
Includes design of the cyber organization, governance, and risk assessments. Qualifications Required: * BA/BS Degree in Computer Science, Cyber Security, Information Security, Engineering ...
Manager, Cybersecurity
Orlando, FL · Hybrid
$103K - $140K/yr
This leader is accountable for risk management, security operations, engineering of cyber ... Establish and oversee risk assessment, security audit, and compliance programs across all business ...
Manager, Cybersecurity
Orlando, FL · Hybrid
$103K - $140K/yr
This leader is accountable for risk management, security operations, engineering of cyber ... Establish and oversee risk assessment, security audit, and compliance programs across all business ...
Senior Manager - ServiceNow
Jacksonville, FL · On-site
Includes design of the cyber organization, governance, and risk assessments. Qualifications Required: * BA/BS Degree in Computer Science, Cyber Security, Information Security, Engineering ...
Senior Manager - ServiceNow
Jacksonville, FL · On-site
Includes design of the cyber organization, governance, and risk assessments. Qualifications Required: * BA/BS Degree in Computer Science, Cyber Security, Information Security, Engineering ...
Includes design of the cyber organization, governance, and risk assessments. Qualifications Required: * BA/BS Degree in Computer Science, Cyber Security, Information Security, Engineering ...
Includes design of the cyber organization, governance, and risk assessments. Qualifications Required: * BA/BS Degree in Computer Science, Cyber Security, Information Security, Engineering ...
Cyber Risk Assessment information
What is the difference between Cyber Risk Assessment vs Cyber Security Analyst?
| Aspect | Cyber Risk Assessment | Cyber Security Analyst |
|---|---|---|
| Primary Focus | Identifying and evaluating cybersecurity risks and vulnerabilities | Monitoring, detecting, and responding to security threats |
| Certifications | CompTIA Security+, CISSP, CISA | CompTIA Security+, CEH, CISSP |
| Work Environment | Risk management teams, consulting firms, security departments | Security operations centers, IT departments, incident response teams |
| Responsibilities | Risk analysis, vulnerability assessments, compliance | Threat detection, incident response, security monitoring |
While both roles involve cybersecurity, Cyber Risk Assessments focus on evaluating potential risks and vulnerabilities to inform security strategies, whereas Cyber Security Analysts actively monitor and respond to ongoing security threats. Understanding these differences helps organizations assign the right roles for comprehensive cybersecurity management.
What is a cyber risk assessment?
A cyber risk assessment is a process used to identify, evaluate, and prioritize potential threats and vulnerabilities in an organization's information systems. It helps organizations understand the potential impact of cyber threats and determine the likelihood of such events occurring. By conducting a cyber risk assessment, businesses can implement appropriate security controls and strategies to mitigate risks, comply with regulatory requirements, and protect sensitive data from cyberattacks. Regular assessments are essential to adapt to evolving threats and maintain a strong cybersecurity posture.
What are some common challenges faced by professionals in Cyber Risk Assessment, and how can they be addressed?
Professionals in Cyber Risk Assessment often encounter challenges such as rapidly evolving threat landscapes, keeping up with regulatory changes, and ensuring clear communication of technical risks to non-technical stakeholders. To address these, staying current with industry trends through continuous learning, leveraging robust risk assessment frameworks, and developing strong communication skills are essential. Additionally, collaborating closely with IT, compliance, and business units helps ensure comprehensive and effective risk management.
What are the key skills and qualifications needed to thrive as a Cyber Risk Assessor, and why are they important?
To thrive as a Cyber Risk Assessor, you need a strong understanding of cybersecurity principles, risk management frameworks, and relevant regulations, often backed by a degree in information security or related certifications like CISSP or CISA. Familiarity with security assessment tools, vulnerability scanners, and risk analysis platforms is typically required. Analytical thinking, attention to detail, and effective communication are vital soft skills for accurately identifying threats and conveying risks to stakeholders. These skills and qualities are crucial for protecting organizational assets and ensuring compliance in an evolving threat landscape.
What are popular job titles related to Cyber Risk Assessment jobs in Florida? For Cyber Risk Assessment jobs in Florida, the most frequently searched job titles are:
What job categories do people searching Cyber Risk Assessment jobs in Florida look for? The top searched job categories for Cyber Risk Assessment jobs in Florida are:
Full-time
Posted 3 days ago
Be an early applicant
Job description
Our team members are the key to our company’s success, and their health and well-being, as well as that of their families, is very important to us. We offer a comprehensive benefits package that allows our team members stay healthy, plan for their future and maintain a healthy work-life balance. Benefits may vary with employment status. To see our fill list of Team Member Benefits please visit our career site: www.gotoworkhappy.com/benefits
Job Description:
The Cyber Risk Assessor III leads cybersecurity risk assessments, control evaluations, and policy oversight across the organization's Governance, Risk, and Compliance program. This strategic role identifies and assesses risks, evaluates control effectiveness, drives regulatory and framework alignment, and strengthens governance processes organization-wide.
Key Responsibilities
Governance, Risk Assessment & Management
- Lead cybersecurity risk assessments for systems, applications, business processes, and third-party
- Drive the identification, analysis, and documentation of cybersecurity risks and control gaps using methodologies such as FAIR and NIST RMF
- Evaluate and assess the risk of cybersecurity issues, findings, and their potential impact to the organization
- Oversee and maintain the Cybersecurity risk register with clear ownership, accountability, and tracking
- Develop mitigation strategies, compensating controls, and risk-based remediation plans with business and technical stakeholders
- Responsible for monitoring and reporting on risk trends, control effectiveness, compliance status, and remediation progress for leadership and stakeholders.
- Own and manage the Cybersecurity Exception Process, including evaluation, approval workflows, and ongoing monitoring
- Establish and track key risk indicators (KRIs) and report on risk trends, control effectiveness, and remediation progress to senior leadership
- Proactively identify, track, and escalate top organizational cybersecurity risks to leadership
- Lead the development, documentation, and continuous improvement of security and GRC processes to strengthen governance, consistency, and operational effectiveness.
- Lead the development, review, and maintenance of cybersecurity policies, standards, procedures, and related governance documentation.
- Support security awareness, governance communications, and continuous improvement initiatives across the GRC program.
Control Evaluation & Maturity Assessment
- Lead the evaluation of design and operating effectiveness of security controls across the organization
- Conduct and manage internal cybersecurity maturity assessments to evaluate program effectiveness and identify improvement opportunities
- Assess control maturity levels and develop roadmaps for enhancement
- Map controls to frameworks such as NIST, ISO 27001, PCI DSS, and other applicable standards
Stakeholder Engagement & Reporting
- Serve as the subject matter expert and advisor on complex cybersecurity risk issues
- Lead and influence cross-functional engagement with IT, Cybersecurity, Audit, Legal, Privacy, and business teams
- Develop and deliver executive-level cybersecurity risk reports for senior management and board-level stakeholders, highlighting critical risks and mitigation strategies
- Communicate complex technical and risk information effectively to both technical and non-technical audiences
- Present risk assessments, findings, and strategic recommendations to executive leadership and board committees
- Lead and facilitate risk workshops and training sessions to promote risk-aware culture
Required Qualifications
Experience & Expertise
- 7+ years of progressive experience in cybersecurity, Governance, Risk, and Compliance (GRC), or information security
- Demonstrated experience leading enterprise-level risk assessments and governance programs
- Deep expertise in risk assessment methodologies and control evaluation concepts
- Experience with cybersecurity frameworks: NIST CSF, ISO 27001, PCI DSS, SOC 2, and/or CIS Controls
- Proven experience developing policies, standards, procedures, and governance documentation
- Experience assessing risk of cybersecurity issues and developing remediation strategies
- Experience conducting technical risk assessments and security architecture reviews
- Proven experience leading and managing cybersecurity maturity assessments
Technical Knowledge
- Comprehensive knowledge across all cybersecurity domains including infrastructure security, network security, application security, cloud security, identity and access management, data protection, endpoint security, security operations, and emerging technologies such as artificial intelligence
- Understanding of security control applicability and limitations across different technology environments
- Current knowledge of the threat landscape and attack vectors
Skills & Competencies
- Strategic thinking and ability to translate technical vulnerabilities into business risk and impact
- Excellent analytical skills with ability to synthesize complex information into actionable insights
- Superior written and verbal communication and report-writing capabilities
- Proven ability to influence and drive outcomes without direct authority across all organizational levels
- Critical thinking and problem-solving abilities
- Attention to detail while maintaining strategic perspective
- Demonstrated leadership in mentoring and developing team members
Preferred Qualifications
Certifications
- CISSP (Certified Information Systems Security Professional)
- CRISC (Certified in Risk and Information Systems Control)
- CISA (Certified Information Systems Auditor)
- CISM (Certified Information Security Manager)
- ISO 27001 Lead Auditor or Lead Implementer
- FAIR Certification
- PCI QSA or ISA
Additional Experience
- Experience with GRC platforms (E.g., Onspring, ServiceNow GRC, Archer, OneTrust, Vanta, Drata)
- Background in regulated industries (gaming, financial services retail)
- Bachelor’s degree in Computer Science, Information Security, Cyber Risk Management, or related field (Master's preferred)