Job Description:

Our client is seeking an experienced Sr. Cybersecurity Risk Analyst to join their Information Security team. This role will be responsible for identifying, assessing, monitoring, and mitigating information security and technology risks while helping ensure compliance with applicable regulations, industry standards, and organizational security policies.

The Sr. Cybersecurity Risk Analyst will work across Information Security, IT, business, and other cross-functional teams to conduct risk assessments, strengthen security controls, support audits and compliance activities, develop and maintain security policies, and contribute to security incident response efforts.

The ideal candidate will have strong experience in security governance, risk management, compliance, vendor risk management, or security operations, along with a solid understanding of security frameworks such as NIST CSF and ISO 27001. Experience with FedRAMP, AI governance, and federal agency programs is highly desirable.

Key Responsibilities:

• Identify, assess, document, and mitigate information security and technology risks across the organization.
• Conduct security and IT risk assessments and provide recommendations to reduce identified risks.
• Develop, review, maintain, and update information security policies, standards, procedures, and controls.
• Monitor the effectiveness of security controls and identify opportunities for improvement.
• Support governance, risk, and compliance activities across IT and Information Security.
• Ensure security practices align with applicable local, state, and federal regulations and industry standards.
• Support compliance with security frameworks and standards, including NIST CSF, ISO 27001, and CCSK-related practices.
• Coordinate and support internal and external security audits, assessments, and compliance reviews.
• Assist with vendor and third-party security risk assessments and ongoing risk monitoring.
• Support security incident response activities, including data collection, analysis, documentation, and follow-up.
• Contribute to security requirements for new applications, systems, projects, and technology initiatives.
• Partner with IT, Security, Risk, and business stakeholders to identify security requirements and ensure appropriate controls are implemented.
• Provide security awareness, training, and guidance to employees and stakeholders as needed.
• Stay current with emerging cybersecurity threats, regulatory requirements, industry standards, and security best practices.
• Contribute to the organization's evolving AI governance and risk management practices.
• Prepare risk, compliance, audit, and security reports for management and other stakeholders.
• Assist with continuous improvement of the organization's information security governance and risk management program.

Required Qualifications:

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Risk Management, or a related field, or equivalent experience.
• 5+ years of experience in information security, with experience in one or more areas such as:
• Governance, Risk & Compliance (GRC)
• Vendor / Third-Party Risk Management
• Security Governance
• Security Operations
• Information Security Risk Management
• Security Compliance
• Hands-on experience conducting security or IT risk assessments and developing risk mitigation strategies.
• Strong understanding of information security policies, standards, controls, and governance processes.
• Experience working with security frameworks such as NIST/NIST CSF and ISO 27001.
• Experience supporting security audits, compliance assessments, and regulatory requirements.
• Strong analytical, problem-solving, documentation, and communication skills.
• Ability to collaborate effectively with technical and non-technical stakeholders.

Preferred Qualifications:

• Experience supporting Federal agency programs or FedRAMP.
• Experience with AI governance, AI risk management, or emerging technology governance.
• Experience with vendor/third-party risk management programs.
• Knowledge of cloud security and cloud governance.
• Experience supporting security incident response and investigations.
• Experience with CCSK or cloud security frameworks.
• Professional certification such as:
• CISSP
• CRISC
• CCSK / CSA certification

Ideal Candidate:

The ideal candidate is a seasoned information security professional who combines strong risk management and GRC expertise with the ability to work collaboratively across technical and business teams. This individual should be comfortable assessing risk, evaluating security controls, supporting audits, developing policies, and translating security and regulatory requirements into practical business and technology solutions.

Salary/Rate: $50-$58/HR (depends on experience level). This is a contract position with candidates expected to work 40 hours/ week.  

About Us

Peterson Technology Partners (PTP) is an Equal Opportunity Employer committed to creating a transparent, inclusive, and human-centered hiring experience.

For more than 28 years, PTP has operated as one of the top IT staffing and recruiting firms in the USA—built on trust, long-term partnerships, and technical excellence.

Based in the Chicago suburb of Park Ridge, IL, our team of more than 500 employees and consultants is dedicated to:

• Helping every client make the best hiring decisions possible
• Matching professionals with the right IT jobs and career opportunities

As part of that commitment, we believe in providing clear information about how our hiring technologies work and how your data is used. The following section outlines our AI-assisted interview process and your rights as a candidate.

AI-Assisted Interview Experience (Pete & Gabi – Rebecca):

To provide a consistent, fair, and flexible experience for all candidates, we use AI-assisted tools to support parts of the interview process. This includes our proprietary AI platform Pete & Gabi, which includes AI recruiter Rebecca.

These AI hiring tools help us:

• Conduct recorded video interviews
• Transcribe interviews
• Summarize candidate responses
• Generate job-related insights
• Streamline communication and scheduling

Please note that:

• The AI does NOT make hiring decisions; all decisions are made by our human recruiters, hiring managers, or client partners.
• The AI does not evaluate facial expressions, emotions, or physical traits; it is used only to support fairness, consistency, and efficiency.

If you prefer a non-AI interview format, we will gladly provide an alternative.