> Markdown version of [/jobs/ext/1821883-cyber-and-technology-risk-analyst-lead-consultant](https://www.wearedevelopers.com/jobs/ext/1821883-cyber-and-technology-risk-analyst-lead-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber and Technology Risk Analyst - Lead Consultant - **Company:** Allstate Corporation - **Location:** Chicago, IL, United States (Remote available) - **Experience:** Expert - **Salary:** $90,700.0 - $153,925.0 - **Contract:** Permanent contract - **Skills:** Cloud Computing Security, Cyber Security, Identity and Access Management, Zero Trust Network Access, Mitre Att&ck, Multi-Cloud, Cyber Threat Analysis, Containerization - **Published:** July 2, 2026 - **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/17453815?backUrl=%2Fcareer%2F17453815%2FCyber-Technology-Risk-Analyst-Lead-Consultant-Illinois-Chicago ## About the Role * Minimum4years'hands onexperience in cyberor technology risk management. * Strongexpertisein cyber threat modeling, including hands-on experience using theMITRE ATT&CK frameworkto develop attack path simulations, assess adversarytactics, and evaluate control effectiveness. * Solidworking knowledge ofcore technology infrastructure, including networks, cloud platforms,storage,operating systems, identity and access management, and security architecture. * Advanced analytical skills with the ability to synthesizecomplex risk scenarios and datainto actionable insights and clear recommendations for technical and business stakeholders. * Proven ability toinfluence and communicate effectivelyacross all levels of the organization, translating technical risk concepts into business impact for senior leadership and non-technical audiences. Desirable Skills * Exposure to second-line risk management, internal audit, or established technology risk frameworks * Working knowledge ofcloud risk and modernarchitecture(e.g., multi-cloud, containerization, zero trust concepts). * Experience withrisk tooling or GRC platformsto support risk lifecycle management * Relevant security certifications (e.g., CISSP, CISM, CRISC, CEH, OSCP) * Exposure to red teaming or adversary simulation training/certifications is a plus, Adversary Simulation, Cloud Security Risk Management, Compliance, Cybersecurity Risk Management, Cyber Threat Modeling, Emerging Risks, GRC Platform, Identity Access Management (IAM), MITRE ATT&CK Framework, Red Teaming, Risk Assessments, Risk Framework, Risk Management Framework, Risk Management Strategies, Risk Mitigation, Risk Mitigation Strategies, Risk Strategies, Security Architecture Design, Technology Risk, Technology Risk Management, When working from home, you must have a dedicated, private workspace free from distractions, along with appropriate desk and seating. Reliable internet is required, with minimum speeds of 50 MB download and 5 MB upload. ## Description The Cyber and Technology Risk Analyst - Lead Consultant leads comprehensive cyber and technology risk assessments, providing independent oversight, challenge, and advisory across the organization's technology landscape. This role is part of the Cyber and Technology Risk Management team, partnering with Technology, Security, and Business leaders to strengthen risk posture and support informed decision-making. The role requires strong analytical capability to evaluate complex risk scenarios, develop attack paths, assess control effectiveness, and deliver actionable insights while proactively monitoring emerging threats and driving effective risk mitigation strategies., * Lead and execute complex technology and cyber risk assessments across business and IT functions, evaluating potential impacts and recommending practical mitigation strategies. * Analyze risk scenarios and control effectiveness toidentifygaps, emerging risks, and key risk drivers using both structured and unstructured data sources. * Develop clear, concise, and actionable risk reports and presentations for stakeholders at all levels, including senior leadership and the Board. * Challenge existing practices and influence enhancements to technology standards, policies, and controls to strengthen the organization's risk posture. * Identify, assess, and communicate potential threats to the technology environment, tailoring messaging for both technical and non-technical audiences. * Monitor industry trends, regulatory developments, and emerging cyber threats to proactivelyidentifyfuture risk exposures and inform strategy. * Support the design, implementation, and continuous improvement of risk management frameworks, methodologies, and controls. * Collaborate cross-functionally withtechnology, security, compliance, and business teams to ensure alignment and effective risk management practices. * Translate findings into actionable remediation recommendations, driving improvements across technology and operations. * Serve as a trusted advisor to Technology, Security, and Risk partners,providingexpert guidance on cyber and technology risk managementbest practices., The candidate(s) offered this position will be required to submit to a background investigation. Joining our team isn't just a job - it's an opportunity. One that takes your skills and pushes them to the next level. One that encourages you to challenge the status quo. One where you can shape the future of protection while supporting causes that mean the most to you. Joining our team means being part of something bigger - a winning team making a meaningful impact. Allstate generally does not sponsor individuals for employment-based visas for this position. Effective July 1, 2014, under Indiana House Enrolled Act (HEA) 1242, it is against public policy of the State of Indiana and a discriminatory practice for an employer to discriminate against a prospective employee on the basis of status as a veteran by refusing to employ an applicant on the basis that they are a veteran of the armed forces of the United States, a member of the Indiana National Guard or a member of a reserve component. ## Related Videos - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [The Open-source Java SDK for Multi-Cloud Development - Sandeep Pal](https://www.wearedevelopers.com/videos/2113-the-open-source-java-sdk-for-multi-cloud-development-sandeep-pal) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml) - [Real-world Threat Modeling](https://www.wearedevelopers.com/videos/936-real-world-threat-modeling) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Best Paying Remote Jobs](https://www.wearedevelopers.com/magazine/255-best-paying-remote-jobs) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)