- Company Name
- Skechers
- Job Title
- Cybersecurity Risk Analyst
- Job Description
-
**Job Title:** Cybersecurity Risk Analyst
**Role Summary:**
Analyze, evaluate, and remediate technical security risks across enterprise systems and third‑party environments. Use NIST 800‑53, CIS Controls, and the NIST Cybersecurity Framework to assess real‑world threat effectiveness, prioritize risks by likelihood and business impact, and drive quantitative security improvement metrics.
**Expectations:**
- Deliver actionable risk assessments that translate technical vulnerabilities into business risk scenarios.
- Collaborate with security, development, and IT operations to implement prioritized controls.
- Maintain an up‑to‑date cyber risk register and risk‑based metrics.
- Support compliance audits (PCI‑DSS, SOX, GDPR) and integrate findings into risk management.
- Provide consistent risk advisory to cross‑functional and executive stakeholders.
**Key Responsibilities:**
- Conduct NIST 800‑53 and CIS Control security control evaluations, focusing on practical posture rather than checklist compliance.
- Analyze threat intelligence (MITRE ATT&CK, industry advisories) to prioritize risks by technical likelihood and business impact.
- Own the cyber risk register: craft accurate risk descriptions, threat scenarios, and metrics reflecting security improvement.
- Assess third‑party risk through technical questionnaires, penetration test reviews, and architecture assessment.
- Work with security operations to merge incident, vulnerability, and threat intel into risk prioritization.
- Drive the development and maturation of risk‑based security metrics that track threat reduction.
- Participate in internal/external audits, documenting compliance status and remedial actions.
- Advise global IT and business partners on security best practices and risk mitigation strategies.
**Required Skills:**
- Strong foundation in network and system hardening, vulnerability management, and enterprise security architectures.
- Hands‑on experience implementing NIST Cybersecurity Framework, NIST 800‑53, or CIS Controls in production environments.
- Proficiency interpreting MITRE ATT&CK, threat intelligence, and attack methodologies relevant to retail/enterprise.
- Analytical ability to quantify risk likelihood and business impact, and communicate findings to technical and non‑technical audiences.
- Proven collaboration with security engineers, system administrators, and developers to implement controls.
- Excellent written and oral communication; capable of presenting complex concepts to executive leadership.
- Self‑motivated, problem‑solving mindset; thrives in cross‑functional teams.
- Experience in retail/e‑commerce security (PCI‑DSS, data protection, supply chain) a plus.
**Required Education & Certifications:**
- Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
- Minimum 4–5 years of cybersecurity experience with hands‑on technical work.
- Industry certifications preferred: CISSP, CISA, CEH, CompTIA Security+, or equivalents demonstrating knowledge of NIST, CIS, PCI‑DSS, and threat frameworks.
Manhattan beach, United states
On site
Junior
06-11-2025