> Markdown version of [/jobs/ext/2996328-analyst-cyber-and-information-security-risk](https://www.wearedevelopers.com/jobs/ext/2996328-analyst-cyber-and-information-security-risk). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Analyst, Cyber and Information Security Risk

- **Company:** Horizontal Talent
- **Location:** Denver, CO, United States
- **Experience:** Experienced
- **Salary:** $60,320.0 - $124,800.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Systems, PCI Data Security Standards, Information Technology
- **Published:** September 19, 2026
- **Apply:** https://www.jofdav.com/jobs/59776084-analyst-cyber-and-information-security-risk

## About the Role

* 3+ years of experience in cybersecurity risk management, IT security control design, or security control audit work.
 * Bachelor's degree in information systems, computer science, or a related field preferred.
 * Working knowledge of security and compliance frameworks such as SOC 1, SOC 2, ISO 27000, SIG, CAIQ, NIST Cybersecurity Framework, SOX, PCI-DSS, GDPR, and privacy laws.
 * Strong communication skills with the ability to explain security topics clearly to technical and non-technical audiences.
 * Ability to influence decisions, support balanced risk-based outcomes, and handle complex discussions professionally.
 * Self-directed approach with a proactive mindset and strong judgment.
 * Comfort working across vendors, IT teams, and business stakeholders.

Preferred Skills

 * CISSP, CISM, CISA, or CRISC certification preferred.
 * GSEC, Security+, or a similar credential considered a plus.
 * Experience with vendor risk reviews or external party assessments.
 * Familiarity with documentation and workflow in an online risk management platform.
 * Strong relationship-building skills and the ability to collaborate effectively across teams.

Horizontal is committed to fostering a diverse, equitable, and inclusive workplace where different perspectives are valued and respected. We encourage candidates from all backgrounds to apply and bring their unique experiences to the team.

## Description

Join a global information security team helping protect complex business operations through thoughtful cybersecurity risk management. This role focuses on assessing third-party security controls, identifying and mitigating risk, and partnering with stakeholders to support secure business decisions.
Responsibilities

 * Evaluate external party security controls and compare them against internal information security requirements.
 * Work with technology and business teams to identify cybersecurity risks tied to current and upcoming projects.
 * Assess vendor and partner risk using questionnaires, industry standards, and internal policies.
 * Recommend practical risk mitigation options and communicate findings to internal and external stakeholders.
 * Guide teams on applicable security, regulatory, and policy requirements.
 * Document assessment activity, findings, and related communications in the risk management platform.
 * Provide status updates to security leadership, project managers, and other stakeholders.
 * Support security policy enforcement and review exception requests with recommendations.
 * Research emerging technologies, architectures, and tools that support enterprise security needs.
 * Complete additional cybersecurity risk management tasks as assigned.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Microservices? Monoliths? An Annoying Discussion!](https://www.wearedevelopers.com/videos/970-microservices-monoliths-an-annoying-discussion)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Demystifying Crypto & Web3: A Technical Journey Through 15 Years of Innovation](https://www.wearedevelopers.com/videos/1516-demystifying-crypto-web3-a-technical-journey-through-15-years-of-innovation)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)