We are seeking a highly skilled and detail-oriented Risk Analyst to support and advance InvoiceCloud’s Cybersecurity and Enterprise Risk Management programs.
Requirements
- Bachelor’s degree in Information Security, Risk Management, Business Analytics, or a related field
- 3–5 years of experience in cyber risk, governance, compliance, or related security functions
- Working knowledge of cyber risk frameworks and methodologies such as NIST CSF, ISO 27005, and FAIR or SAFE risk quantification
- Experience maintaining risk registers, tracking mitigation plans, and supporting risk governance processes
- Familiarity with regulatory and assurance frameworks such as SOC 2 and PCI, including evidence collection and audit support
- Hands-on experience with GRC platforms (e.g., Drata, Safebase) and strong analytical skills using tools such as Excel or basic SQL
- Ability to translate technical and regulatory risk into clear, actionable insights for security leadership and executive stakeholders
- Strong judgment and decision-making skills, with the ability to evaluate trade-offs between risk, cost, and business impact
- Demonstrated ability to handle sensitive and confidential information with integrity and professionalism
- Excellent written and verbal communication skills, with the ability to operate effectively across teams and functions
- Proven ability to manage multiple priorities, work independently, and deliver results in a fast-paced, evolving environment
Benefits
- Competitive salary
- Opportunity to work with a fast-growing fintech leader
- Chance to be part of a purpose-driven environment where top talent thrives