Information Security Risk Assessment Analyst

We are looking for a skilled Information Security Risk Assessment Analyst to join our ISRM services team. The ideal candidate will be responsible for reviewing completed compliance and risk assessments for quality assurance and consulting the respective application teams on the related cybersecurity risk management matters, as well as for handling risk change management. This includes conducting plausibility checks, validating risk ratings, ensuring documentation completeness, and identifying inconsistencies or policy deviations. You will document your reviews, provide constructive feedback, and support remediation actions as needed. The role requires strong attention to detail, analytical thinking, and the ability to interpret complex security requirements. Familiarity with information security frameworks and risk management practices is essential. You will also be expected to use ticketing and assessment tools effectively to manage and track requests. Communication with client stakeholders and internal teams is a key part of this position.

Responsibilities

• Conduct quality assurance reviews of information security compliance and risk assessments.
• Validate assessment content for accuracy, completeness, and policy alignment.
• Review and process change request tickets related to risks stemming from the assessments.
• Identify inconsistencies and provide feedback or recommendations.
• Track and document review outcomes and ticket status.
• Collaborate with client teams for clarification and issue resolution.
• Ensure adherence to service level agreements (SLAs) and key performance indicators (KPIs).
• Support process improvements and standardisation efforts.
• Escalate significant risk issues or trends as needed.
• Participate in team meetings and client reporting activities.

Requirements

• 9+ years of experience in information security, risk assessment, or GRC.
• Understanding of information security frameworks (e. g., NIST CSF/RMF and ISO 27001).
• Strong analytical and detail-orientated approach to reviewing documentation.
• Proficiency with risk management or ticketing systems (e. g., JIRA).
• Excellent written and verbal communication skills in English.
• Ability to work independently and within a structured managed service model.