Sr Risk Analyst

Company Description

Do you want to develop your career and make an impact in the fast-growth, fast-moving B2B technology space?

At Informa TechTarget, you’ll collaborate and grow alongside some of the industry’s most respected experts. You’ll work with leading brands and be exposed to world-shaping innovations. You’ll apply your energy and intellect to helping clients be faster to market and faster to revenue.

We’re a vibrant community of world-class practitioners – over 2000 colleagues strong – with offices in 19 locations around the world. We’re traded on Nasdaq and also part of Informa PLC, a global leader in business-to-business events, digital services, and academic research in the FTSE 100.

About Informa TechTarget

Informa TechTarget (Nasdaq: TTGT) informs, influences and connects the world’s technology buyers and sellers, to accelerate growth from R&D to ROI.

With an unparalleled reach of over 220 highly targeted technology-specific websites and more than 50 million permissioned first-party audience members, Informa TechTarget has a unique understanding of and insight into technology markets.

Underpinned by those audiences and their data, we offer expert-led, data-driven, and digitally enabled services that deliver significant impact and measurable outcomes to our clients. We provide our customers with:

• Trusted information that shapes the industry and informs investment
• Intelligence and advice that guides and influences strategy
• Advertising that grows reputation and establishes thought leadership
• Custom content that engages and prompts action
• Intent and demand generation that more precisely targets and converts

Our organization is committed to sustainability, diversity, wellbeing, and ethical working practices. Visit informatechtarget.com and follow us on LinkedIn.

For more information, visit informatechtarget.com and follow us on LinkedIn

Job Description

This role is based in our Newton, MA office.

We are seeking an experienced and strategic Senior Cyber Risk Analyst to join our team. This role requires deep expertise in enterprise cybersecurity risk management, with responsibility for identifying, assessing, and mitigating cyber risks across the organization. You will lead enterprise risk assessments, partner with engineering and security teams on strategic initiatives, and provide executive-level reporting on the organization's cyber risk posture. This position also includes emerging responsibilities in AI governance and technology risk as part of a comprehensive enterprise risk management approach.

Key Responsibilities

Enterprise Risk Assessment & Management

• Lead comprehensive enterprise-wide cyber risk assessments across all business operations, systems, and infrastructure
• Identify, analyze, and evaluate cybersecurity risks including threats, vulnerabilities, and potential business impacts
• Develop and maintain enterprise risk registers, ensuring all cyber risks are properly documented, prioritized, and monitored
• Create and implement risk treatment plans and mitigation strategies to reduce organizational exposure
• Conduct risk assessments for new technologies, systems, and business initiatives in partnership with engineering and product teams
• Utilize risk management frameworks (NIST CSF, ISO 27005, FAIR) to quantify and communicate risk

Cloud Security & Infrastructure Risk

• Assess security risks associated with cloud environments (AWS, Azure, GCP) and hybrid infrastructure
• Evaluate cloud architecture designs and configurations for security and compliance risks
• Partner with cloud engineering teams to implement security controls and risk mitigation measures
• Review and assess risks related to cloud migration projects and infrastructure changes

Vulnerability & Threat Management

• Oversee vulnerability management program effectiveness and risk prioritization
• Analyze vulnerability scan results and penetration test findings to assess enterprise risk exposure
• Work with IT and security teams to ensure timely remediation of critical vulnerabilities
• Monitor threat intelligence and assess potential impact to the organization
• Evaluate the effectiveness of security controls in mitigating identified vulnerabilities

Third-Party & Vendor Risk Ma