Cybersecurity Risk Analyst assessing and mitigating security risks within diverse technology environments at Skechers. Collaborating with teams to implement security improvements and reduce vulnerabilities.
Responsibilities
Perform security control evaluations using NIST 800-53 and CIS Controls as implementation guides rather than compliance checklists.
Assess actual security posture and effectiveness against real-world threats.
Analyze and prioritize cyber risks based on technical likelihood, business impact, and threat intelligence - translating complex security vulnerabilities into actionable risk scenarios for stakeholders.
Drive technical risk remediation by working directly with technical teams and business stakeholders to align on and execute security improvements.
Maintain and evolve the cyber risk register with technically accurate risk descriptions, realistic threat scenarios, and meaningful metrics that reflect real security posture improvements.
Support the team in assessing third-party security risks through technical security questionnaires, penetration test reviews, and security architecture analysis in addition to vendor compliance documentation.
Collaborate with security operations teams to incorporate threat intelligence, incident findings, and vulnerability data into risk assessments and prioritization decisions.
Help mature risk-based security metrics that measure security improvements and threat reduction rather than compliance percentages.
Participate in internal and external audit processes for relevant compliance concerns including SOX and GDPR at the enterprise level.
Interface with global IT and business partners to provide guidance, risk advisory services and support.
Requirements
3+ years of cybersecurity experience with practical, hands-on technical background.
Strong technical foundation in network security, system hardening, vulnerability management, and enterprise security architectures.
Practical experience implementing security frameworks - hands-on work with NIST Cybersecurity Framework, NIST 800-53 controls, or CIS Controls in operational environment.
Understanding of threat landscapes including the MITRE ATT&CK framework, threat intelligence, and attack methodologies targeting retail/enterprise environment.
Strong analytical and communication skills with the ability to translate technical vulnerabilities into business risk scenarios and present complex security concepts to diverse audiences, including non-technical stakeholders and executive leadership.
Experience with technical risk assessment and the ability to quantify and prioritize risks based on likelihood and business impact.
Understanding of retail security challenges including customer data protection and supply chain security considerations.
Proven ability to work with technical teams including security engineers, system administrators, and developers to drive security improvements.
Self-motivated problem solver who thrives in collaborative, cross-functional environments.
Regional Security Manager responsible for security consulting and support to sales teams in Switzerland. Driving security solution growth while ensuring effective crisis management and risk assessments.
Security Officer performing patrol, emergency response, and customer service duties at Freeport - McMoRan. Engaging in surveillance and collaborating with local law enforcement in Bayard, NM.
Security Officer at Freeport - McMoRan responsible for patrol, emergency response, and visitor management. Ensuring safety and compliance at mining facility in Claypool, Arizona.
FPGA Verifier developing next - generation cybersecurity products with a multidisciplinary team. Focusing on hardware logic and collaborating on various engineering projects in a hybrid setting.
Professional Services Consultant overseeing implementations and consultative engagements for Proofpoint Data Security products. Collaborating on strategic program design solutions and managing client relationships.
Security & Risk Adviser strengthening cybersecurity across Asiera’s clients and within the organisation. Leading policy development, compliance work, and risk assessments in a collaborative environment.
Staff Security Engineer defining and owning security architecture for a shared AI compute platform. Working in early - to - mid stage environments, engaging with complex security challenges.
Security Services role supporting security protocols and monitoring at the Avionics Complex. Responsibilities include visitor processing, personnel escorting, and compliance adherence.
Security Guard providing a secure environment for clients and staff at Urban Pathways in Bronx. Monitors access, enforces rules, and assists with client needs.
Security Patrol Officer ensuring safety through patrolling and reporting at assigned facilities. Requires flexibility in scheduling and strong communication skills with guests and staff.