Cyber Risk Analyst III (remote)

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today!

What you will be doing

We are seeking a highly skilled and motivated Cyber Risk Analyst III with a strong focus on data analytics. In this role, you will be responsible for analyzing and managing cyber risk within our organization, with a specific emphasis on leveraging data analytics to identify potential threats and vulnerabilities. You will work closely with cross-functional teams to track strategies and implement effective risk management practices. As a Cyber Risk Analyst III specializing in data analytics, you will play a crucial role in strengthening our organization's overall cybersecurity posture by utilizing advanced analytics techniques to proactively identify and mitigate cyber risks efficiently.

• Manages security planning, assessments and analysis activities and provides guidance on information security policies, procedures, standards, and compliance.
• Assists in defining processes and procedures for the information security governance program, Risk management programs and reports any process gaps to management and recommend possible solutions.
• Runs the Information security assessments reports and analysis using security tools.
• Manages, reviews, and responds to security alerts, escalations and incidents and identifies their root causes.
• Analyzes business processes and business requirements to determine conformance to security policies and procedures.
• Analyzes and reports concerning residual risk, vulnerabilities, and other security exposures, including misuse of information assets and non-compliance to senior technical executives.
• Identifies problems, determines accuracy and relevance of information, uses sound judgment to generate and evaluate alternatives, and makes recommendations.
• Assists Lead Analysts and other senior security executives in the development and implementation of strategies to align information security with company business objectives and goals, protecting the integrity, confidentiality, and availability of data.
• Provides ongoing knowledge transfer to Analysts I/II on security products and standards.
• Works with customers to identify security requirements using methods that may include risk and business impact assessments.
• Follows up on deficiencies identified in monitoring reviews, self-assessments, automated assessments, and internal and external audits to ensure that appropriate remediation measures are in place.
• Assists in developing, refining, and implementing enterprise-wide security policies, procedures, and standards across multiple platforms and application environments to meet compliance responsibilities.
• Analyze Data: Collect, analyze, and interpret cybersecurity data from various sources that measure cyber security risk.
• Data Modeling: Develop and maintain data models that can effectively represent the cyber risk landscape within the organization.
• Identify Threats: Utilize advanced data analytics techniques to identify trends and patterns that could pose risks to the organization's digital assets.
• Reporting: Prepare clear and concise reports detailing findings from data analysis, including actionable recommendations for mitigating identified risks.
• Continuous Monitoring: Implement reporting processes for ongoing monitoring of cyber risk indicators, ensuring timely identification of emerging threats or changes in the risk landscape.
• Stakeholder Engagement: Communicate complex technical concepts related to cyber risk management to both technical and non-technical stakeholders effectively.

• Education: bachelor's degree in computer science, Information Systems, Cybersecurity, or a related field is required.
• Experience: Minimum of three (3) or more years of experience in cybersecurity or related roles with a strong focus on IT Risk Management.
• Analytical Skills: Strong analytical thinking and problem-solving abilities are essential for this role.
• Communication Skills: Excellent written and verbal communication skills to convey complex technical information clearly and concisely.

• Proficiency in data analysis tools such as Python/R/SQL
• Experience with statistical modeling techniques
• Knowledge of machine learning algorithms
• Familiarity with building dashboards and other reporting tools.

• Understanding of common cyber threats and attack vectors
• Familiarity with industry best practices for cybersecurity risk management
• Knowledge of regulatory requirements such as GDPR or CCPA is desirable

• Certified Information Systems Security Professional (CISSP)
• Certified Ethical Hacker (CEH)
• Certified Information Privacy Professional (CIPP)