Cyera
Sr. GRC Risk Analyst
$100K–$120K
St. Louis · Hybrid · Senior · Full-time · Posted Oct 30, 2026
- Experience
- 3 to 5 years.
- Education
- Bachelor's degree in a related field, or equivalent experience.
About the job
Build and operate Cyera’s enterprise risk management framework and risk register, translating risk data into leadership decisions and supporting audits and governance.
What you'll do
- Design the risk methodology, governance structure, and standardized risk register; manage the full risk lifecycle.
- Conduct assessments, track treatment and remediation, map risks to controls and related processes, and maintain audit evidence.
- Report risk trends and KRIs to leaders, support audits and reviews, and improve the program through workflows, training, and templates.
What they ask for
- 3 to 5 years of experience in GRC, IT risk, information security risk, or enterprise risk management.
- Hands-on experience building or significantly maturing a risk register and risk assessment process.
- Working knowledge of at least two of ISO 27001, NIST CSF, NIST 800-30, NIST 800-53, or SOC 2.
- Bachelor's degree in a related field, or equivalent experience.
Nice to have
- Certifications such as CRISC, CISA, CISSP, ISO 27001 Lead Implementer or Lead Auditor, or ISO 31000 Risk Manager.
- Experience with GRC platforms and Jira workflows; exposure to AI risk management, ISO 42001, or the EU AI Act.
Pay
$100,000 - $120,000 USD total compensation
Tools
ISO 27001, NIST CSF, NIST 800-30, NIST 800-53, SOC 2, ISO 42001, Jira, GRC platforms
AI focus
Align risk management with AI governance and ISO 42001; exposure to AI risk management is preferred.
Model-written summary · the original posting is authoritative