Sr Risk & Cyber Technology Analyst

The Senior Cyber and Technology Risk Analyst is a key member of the Cyber and Technology Risk Management team within the second line of defense. This role helps strengthen and mature the cyber and technology risk program by providing oversight, guidance, and subject matter expertise to first-line Cybersecurity and Technology teams. The analyst supports the effective management of cyber, technology, and data risks within our Clients risk appetite while working within established risk frameworks and governance processes. Duties & Responsibilities:

• Technically credible with engineering and cyber teams (can hold their own in conversations on architecture, cloud, IAM, etc.)
• Has a strong risk mindset (understands controls, risk identification, and how to assess effectiveness, not just document it)
• Comfortable operating in a build environment.
• Execute risk assessments, control testing, and gap analysis
• Partner with 1LOD teams to improve controls and processes
• Help translate frameworks (NIST, COBIT, FFIEC, etc.) into practical guidance

• 5-8+ years in cyber/technology risk, IT audit, or consulting
• Experience in a regulated environment (financial services preferred)
• Has worked closely with engineering or security teams, not purely compliance
• Bachelor’s degree in Information Security, Computer Science, Information Management, Business or related field or equivalent combination of education and work experience. Advanced degree or equivalent work experience preferred

Nice to Have Experience:

• Certification from recognized security, technology, or risk management body (e.g., CISSP,CEH, CISA/CISM, CRISC, GIAC, FAIR, etc.) is preferred.

Employment Eligibility: Gravity cannot transfer nor sponsor a work visa for this position. Applicants must be eligible to work in the U.S. for any employer directly (we are not open to contract or “corp to corp” agreements).