Sr Risk Analyst (Cybersecurity)

Location: Newton, MA, United States; in-person work three days a week or more, with flexibility to work from home or remotely at other times.

Salary: $150K–$170K per year, based on experience.

Company

Informa TechTarget provides data-driven technology information, intelligence, advertising, custom content, and intent and demand generation services for technology buyers and sellers.

What you will do

• Lead enterprise-wide cyber risk assessments, maintain risk registers, and implement risk treatment and mitigation plans.
• Assess cloud environments, architecture, configurations, migrations, and hybrid infrastructure risks across AWS, Azure, and GCP.
• Oversee vulnerability and threat management, prioritize exposure, evaluate security controls, and support timely remediation.
• Conduct third-party and vendor cybersecurity risk assessments, review security evidence, and support remediation and contract requirements.
• Support cybersecurity governance, policies, audits, regulatory monitoring, risk committees, and executive or board reporting with KRIs and KPIs.
• Advise engineering, IT, security, product, legal, compliance, privacy, and audit teams on technology, AI/ML, privacy, and emerging risk.

Requirements

• Bachelor’s degree in Cybersecurity, Information Security, Risk Management, Computer Science, Information Technology, or a related field.
• 5–8 years of progressive experience in cybersecurity risk management, information security, or IT risk.
• Proven experience conducting enterprise-level cyber risk assessments in complex technology environments.
• Experience with cloud security risk assessment and AWS, Azure, or GCP, plus third-party risk management and vendor security assessments.
• At least one required certification: CRISC, CISSP, or CISM.
• Deep knowledge of cybersecurity principles, threats, vulnerabilities, attack vectors, security controls, defense in depth, and compensating controls.
• Knowledge of NIST, ISO 27001, SOC 2, SOX, NIST 800-53, and related risk and compliance frameworks.
• Experience with vulnerability management tools and processes, GRC platforms, and network, application, and infrastructure security.
• Exceptional analytical, critical-thinking, communication, stakeholder-management, data-analysis, visualization, and project-management skills, including translating technical risks for executives.

Nice to have

• CISA, CGRC, CCSP, or other relevant cybersecurity or risk management certifications.
• Master’s degree in a related field; background in information security operations or security engineering.
• Knowledge of security architecture, secure design, incident response, business continuity, AI/ML security risks, emerging technology governance, and GDPR, CCPA, or PIPEDA.

Culture & Benefits

• Collaborative, diverse, ethical, and wellbeing-focused environment with in-person and online community activities.
• Open vacation, 10 national holidays, and the opportunity to work from almost anywhere for up to four weeks per year.
• Competitive benefits including 401(k) match, health, vision and dental insurance, parental leave, and discounted company shares through an ESPP.
• Training, mentoring, LinkedIn Learning access, internal mobility, volunteer time, wellbeing support, and recognition programs.
• Regular collaboration with international teams; the role requires in-person work with colleagues, customers, or partners three days a week or more.