Cybersecurity Risk Analyst – Third-Party & Internal Risk

Job overview

The Cybersecurity Risk Analyst – Third-Party & Internal Risk role is hybrid in Northbrook, IL, with three days in the office. The listing gives a compensation range of $60–$85 per hour. The role supports cybersecurity risk assessments across technologies, business initiatives, and third-party providers. The analyst manages assessments from intake through recommendations and remediation support, dividing work approximately equally between vendor/third-party and internal risk. The role helps stakeholders understand business risk, evaluate controls, track remediation, and communicate material findings.

What you'll do

• Conduct and manage cybersecurity and information risk assessments
• manage vendor and internal assessments
• coordinate vendor assessments with contractors
• identify and document risk scenarios
• develop risk statements and maintain risk registers
• evaluate controls and recommend risk treatment
• assess residual risk
• track remediation through closure
• support exception management, third-party due diligence, control validation, ongoing monitoring, customer security questionnaires, and risk reporting.

What we're looking for

Skills & competencies

cybersecurity risk analyst

third-party risk

internal risk

northbrook il

hybrid

3 days in office

$60–$85/hr

fair

nist

risk assessments

servicenow preferred

Work arrangement

• Weekend coverage required

Benefits & perks

• Health insurance and paid time off.

Why this role

Hybrid schedule with three days in the Northbrook office; ServiceNow experience is strongly preferred, while CISSP, CISM, or CISA certifications are nice to have but not required.

About the employer

Gulf Coast Automation Group is hiring for this role. Industry: Computer Systems Design Services. Sector: 54.