Security Human Risk & Resilience Analyst (Cybersecurity)

Location: Hybrid role based in the Downers Grove, IL or Chicago, IL offices, United States.

Salary: $89,000–$148,100 base range annually, plus an annual discretionary bonus, equity, and benefits.

Company

hirify.global is a specialized insurer providing products and services for customers with evolving needs.

What you will do

• Execute security risk assessments, control and policy support, issue tracking, governance reporting, and assurance coordination.
• Design targeted security-culture and human-risk interventions based on behavior, business context, incidents, and measurable risk indicators.
• Develop role-based education, leader toolkits, campaigns, and behavior-change initiatives beyond annual awareness requirements.
• Analyze GRC, control, incident, phishing, training, and workforce data to identify risk patterns and measure effectiveness.
• Build dashboards, KRIs, KPIs, cohort analyses, executive insights, and action plans tied to risk outcomes.
• Partner with business leaders, HR, Communications, technology teams, and security specialists while owning and improving recurring GRC and culture processes.

Requirements

• 5+ years of experience in cybersecurity GRC, risk, compliance, security awareness, human risk, change management, or a related area.
• Bachelor’s degree in Cybersecurity, Information Systems, Risk Management, Business, Communications, Behavioral Science, Education, or a related discipline, or equivalent professional experience.
• Practical experience with risk assessments, controls, policies, issues, governance, and assurance support.
• Strong analytics skills using spreadsheets, BI or reporting tools, GRC platforms, or equivalent data sources.
• Ability to understand technical security evidence, evaluate underlying risk, and connect security culture with incidents and control outcomes.
• Strong written and verbal communication, stakeholder influence, executive communication, and independent process ownership.

Nice to have

• CISSP, CISM, CRISC, Security+, or a comparable security or risk credential.
• Training or certification in change management, adult learning, communications, or behavioral science.
• Experience with GRC platforms, BI and analytics tools, phishing or human-risk platforms, and security metrics.
• Experience supporting audit, compliance, or governance forums in a regulated enterprise.

Culture & Benefits

• Hybrid work from the Downers Grove or Chicago office.
• Medical, dental, and vision coverage.
• Paid time off and 401(k) benefits.
• Annual discretionary bonus and equity eligibility.
• Focus on professional development, workplace diversity, and work-life balance.