Cybersecurity Specialist

Job Description

Job Overview

\n

\n
• Global Cybersecurity Risk Analyst

\n

• Location: Northbrook, IL

\n

• Work Arrangement: Hybrid (3 Days Onsite)

\n

• Employment Type: Contract-to-Hire

\n

• Experience Level: Mid-Level
  
  

\n

Position Overview

\n

\n
• We are seeking a Global Cybersecurity Risk Analyst to support enterprise cybersecurity, information risk, and third-party risk management initiatives. This individual will assess risks associated with technologies, business initiatives, applications, and external vendors, helping stakeholders understand potential exposures and make informed risk management decisions.

\n

• The ideal candidate combines hands-on cybersecurity risk assessment experience with a strong understanding of vendor risk management, security controls, and regulatory requirements. Experience using ServiceNow to conduct and manage vendor risk assessments is particularly important.
  
  

\n

Key Responsibilities

\n

\n
• Conduct cybersecurity and information risk assessments for new and existing technologies, applications, business initiatives, and third-party providers.

\n

• Identify, document, and evaluate risk scenarios, including assets, threats, vulnerabilities, existing controls, likelihood, and potential business impact.

\n

• Evaluate security controls and determine inherent and residual risk, recommending appropriate mitigation strategies and compensating controls.

\n

• Communicate risk findings and recommendations to business stakeholders, risk owners, information governance teams, and cybersecurity partners.

\n

• Support risk-based decisions involving risk acceptance, mitigation, transfer, and avoidance.

\n

• Manage risk register entries, track identified issues and remediation activities, and monitor risks through resolution.

\n

• Support the third-party risk management lifecycle, including vendor assessments, due diligence, control validation, ongoing monitoring, and remediation tracking.

\n

• Use ServiceNow to perform and manage vendor risk assessments and maintain accurate risk documentation.

\n

• Assist with customer cybersecurity questionnaires, audit requests, and evidence collection.

\n

• Apply relevant regulatory, contractual, and industry requirements when evaluating cybersecurity and third-party risks.

\n

• Support risk reporting and identify opportunities to improve the organization's overall cybersecurity and information risk posture.
  
  

\n

Required Qualifications

\n

\n
• Bachelor's degree in Business, Computer Science, Cybersecurity, Information Security, or a related field; equivalent relevant experience may be considered.

\n

• At least 2 years of experience in cybersecurity, information security, technology risk, governance, risk and compliance (GRC), or a related field.

\n

• At least 2 years of experience supporting risk and compliance activities, technology projects, applications, systems, managed service providers, or third-party relationships.

\n

• Hands-on experience using ServiceNow for Vendor Risk Assessments or vendor risk management workflows.

\n

• Experience conducting or supporting cybersecurity risk assessments, evaluating security controls, documenting findings, and tracking remediation activities.

\n

• Understanding of third-party risk management, information security controls, and technology risk principles.

\n

• Familiarity with cybersecurity and risk management frameworks such as NIST Cybersecurity Framework, NIST SP 800-series, ISO 27001, COBIT, or FAIR.

\n

• Strong analytical, organizational, and problem-solving skills.

\n

• Excellent written and verbal communication skills, including the ability to translate technical security concerns into business risks and actionable recommendations.

\n

• Ability to manage multiple assessments and priorities while working effectively with cross-functional stakeholders.
  
  

\n

Preferred Qualifications

\n

\n
• Experience evaluating third-party security risks through vendor risk management, information security, regulatory compliance, or audit activities.

\n

• Familiarity with GRC and risk management platforms beyond ServiceNow.

\n

• Experience supporting risk registers, control assessments, audit documentation, and remediation plans.

\n

• Relevant certifications such as CISSP, CISM, CISA, or comparable cybersecurity and risk management credentials.
  
  

\n

What Success Looks Like

\n

\n
• Timely and accurate completion of cybersecurity and vendor risk assessments.

\n

• Clear documentation of risk findings, control gaps, and mitigation recommendations.

\n

• Effective coordination with business owners and vendors to resolve identified risks.

\n

• Consistent tracking of remediation activities and accurate reporting of the organization's risk posture.

\n

• Practical, risk-based recommendations that balance security requirements with business objectives.
  
  

\n

Compensation

\n

\n
• $45-55/hr (W2)

\n

• Conversion Salary Target $90,000-100,000
  
  

\n

#1329\n
\n