{"id":3767003,"url":"https://alion.io/job/informa-sr-risk-analyst-2","title":"Sr Risk Analyst","company":{"id":4365,"name":"Informa","domain":"informa.com","url":"https://alion.io/company/informa-group-plc","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"A","score":99,"open_postings":40,"ghost_share":0,"stale_share":0.25,"repost_share":0,"time_to_fill_p50_days":15,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Finance","role_family":"Finance","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Newton, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":150000,"max":170000,"currency":"USD","period":"year","gross":null,"usd_annual":170000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Defense in Depth","optional":false},{"name":"GCP","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST CSF","optional":false},{"name":"SOC 2","optional":false},{"name":"GDPR","optional":true}],"status":"live","first_seen_at":"2026-11-04T17:28:10Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-06T10:48:10Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Do you want to develop your career and make an impact in the fast-growth, fast-moving B2B technology space?\nAt Informa TechTarget, you’ll collaborate and grow alongside some of the industry’s most respected experts. You’ll work with leading brands and be exposed to world-shaping innovations. You’ll apply your energy and intellect to helping clients be faster to market and faster to revenue.\nWe’re a vibrant community of world-class practitioners - over 2000 colleagues strong - with offices in 19 locations around the world. We’re traded on Nasdaq and also part of Informa PLC, a global leader in business-to-business events, digital services, and academic research in the FTSE 100.\nAbout Informa TechTarget\nInforma TechTarget (Nasdaq: TTGT) informs, influences and connects the world’s technology buyers and sellers, to accelerate growth from R&D to ROI.\nWith an unparalleled reach of over 220 highly targeted technology-specific websites and more than 50 million permissioned first-party audience members, Informa TechTarget has a unique understanding of and insight into technology markets.\nUnderpinned by those audiences and their data, we offer expert-led, data-driven, and digitally enabled services that deliver significant impact and measurable outcomes to our clients. We provide our customers with:\nTrusted information that shapes the industry and informs investment\nIntelligence and advice that guides and influences strategy\nAdvertising that grows reputation and establishes thought leadership\nCustom content that engages and prompts action\nIntent and demand generation that more precisely targets and converts\nOur organization is committed to sustainability, diversity, wellbeing, and ethical working practices. Visit informatechtarget.com and follow us on LinkedIn.\nFor more information, visit informatechtarget.com and follow us on LinkedIn\n This role is based in our Newton, MA office.\nWe are seeking an experienced and strategic Senior Cyber Risk Analyst to join our team. This role requires deep expertise in enterprise cybersecurity risk management, with responsibility for identifying, assessing, and mitigating cyber risks across the organization. You will lead enterprise risk assessments, partner with engineering and security teams on strategic initiatives, and provide executive-level reporting on the organization's cyber risk posture. This position also includes emerging responsibilities in AI governance and technology risk as part of a comprehensive enterprise risk management approach.\nKey Responsibilities\nEnterprise Risk Assessment & Management\nLead comprehensive enterprise-wide cyber risk assessments across all business operations, systems, and infrastructure\nIdentify, analyze, and evaluate cybersecurity risks including threats, vulnerabilities, and potential business impacts\nDevelop and maintain enterprise risk registers, ensuring all cyber risks are properly documented, prioritized, and monitored\nCreate and implement risk treatment plans and mitigation strategies to reduce organizational exposure\nConduct risk assessments for new technologies, systems, and business initiatives in partnership with engineering and product teams\nUtilize risk management frameworks (NIST CSF, ISO 27005, FAIR) to quantify and communicate risk\nCloud Security & Infrastructure Risk\nAssess security risks associated with cloud environments (AWS, Azure, GCP) and hybrid infrastructure\nEvaluate cloud architecture designs and configurations for security and compliance risks\nPartner with cloud engineering teams to implement security controls and risk mitigation measures\nReview and assess risks related to cloud migration projects and infrastructure changes\nVulnerability & Threat Management\nOversee vulnerability management program effectiveness and risk prioritization\nAnalyze vulnerability scan results and penetration test findings to assess enterprise risk exposure\nWork with IT and security teams to ensure timely remediation of critical vulnerabilities\nMonitor threat intelligence and assess potential impact to the organization\nEvaluate the effectiveness of security controls in mitigating identified vulnerabilities\nThird-Party & Vendor Risk Management\nConduct cybersecurity risk assessments of third-party vendors, suppliers, and business partners\nReview vendor security questionnaires, certifications, and audit reports\nAssess risks associated with vendor access to systems and data\nMonitor ongoing third-party risk and ensure compliance with security requirements\nSupport vendor risk remediation efforts and contract security requirements\nGovernance, Compliance & Policy\nEnsure compliance with relevant cybersecurity regulations, standards, and frameworks (SOC 2, ISO 27001, NIST, Sox, etc.)\nSupport the development and maintenance of cybersecurity policies, standards, and procedures\nParticipate in internal and external audits related to cybersecurity and risk management\nMonitor regulatory changes and assess impact on organizational risk posture\nContribute to the organization's cybersecurity governance structure and risk committee activities\nExecutive Reporting & Metrics\nPrepare comprehensive cyber risk reports and presentations for executive leadership, board of directors, and key stakeholders\nDevelop and maintain cyber risk dashboards with Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs)\nCommunicate complex cybersecurity risks in business terms to non-technical executive audiences\nProvide regular updates on risk trends, threat landscape, and mitigation progress\nPresent risk-based recommendations to support strategic business decisions\nStrategic Partnership & Advisory\nPartner with engineering, IT, security, and product teams on new initiatives and technology implementations\nProvide expert cybersecurity risk guidance during project planning and system design phases\nAdvise business units on cyber risk implications of strategic decisions and initiatives\nCollaborate with cross-functional teams including legal, compliance, privacy, and internal audit\nEmerging Technology & AI Governance\nAssess cybersecurity and privacy risks associated with AI/ML systems and emerging technologies\nSupport the development of AI governance frameworks and responsible AI practices\nEvaluate risks related to AI implementation including data privacy, model security, and ethical considerations\nStay current with emerging technology risks and evolving regulatory requirements\nRequired Qualifications\nEducation & Experience\nBachelor's degree in Cybersecurity, Information Security, Risk Management, Computer Science, Information Technology, or related field\n 5-8 years of progressive experience in cybersecurity risk management, information security, or IT risk\nProven track record of conducting enterprise-level cyber risk assessments in complex technology environments\nExperience with cloud security risk assessment and cloud platforms (AWS, Azure, GCP)\nDemonstrated experience in third-party risk management and vendor security assessments\nProfessional Certifications\nRequired (at least one):\n CRISC (Certified in Risk and Information Systems Control)\n CISSP (Certified Information Systems Security Professional)\n CISM (Certified Information Security Manager)\nPreferred:\nCISA (Certified Information Systems Auditor)\nCGRC (Certified in Governance, Risk and Compliance)\nCCSP (Certified Cloud Security Professional)\nAdditional relevant cybersecurity or risk management certifications\nCybersecurity & Technical Skills\nDeep understanding of cybersecurity principles, threats, vulnerabilities, and attack vectors\nStrong knowledge of risk management frameworks (NIST, ISO 27001, Soc2, Sox)\nExperience with vulnerability management tools and processes\nUnderstanding of cloud security architecture and controls (AWS, Azure, GCP)\nKnowledge of security controls, defense-in-depth strategies, and compensating controls\nFamiliarity with compliance frameworks (SOC 2, ISO 27001, NIST 800-53)\nExperience with GRC (Governance, Risk, and Compliance) platforms\nUnderstanding of network security, application security, and infrastructure security\n Professional Skills\nExceptional analytical and critical thinking skills with strong attention to detail\nExcellent written and verbal communication skills, particularly for executive audiences\nAbility to translate technical cybersecurity concepts into business risk language\nStrong stakeholder management and influence skills across all organizational levels\nProficiency in data analysis and visualization tools\nProject management capabilities and ability to manage multiple priorities\nPreferred Qualifications\nMaster's degree in Cybersecurity, Information Security, Risk Management, or related field\nBackground in information security operations or security engineering\nKnowledge of security architecture and secure design principles\nExperience with security incident response and business continuity planning\nFamiliarity with AI/ML security risks and emerging technology governance\nUnderstanding of privacy regulations (GDPR, CCPA, PIPEDA)\nKey Competencies\nStrategic risk thinking and business acumen\nProactive risk identification and problem-solving\nExecutive presence and communication\nStakeholder influence and relationship building\nAdaptability to evolving threat landscape\nEthical judgment and integrity\nContinuous learning and professional development\nCollaboration and cross-functional partnership\n TechTarget, Inc., doing business as Informa TechTarget, including its subsidiaries is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws. We strictly prohibit and do not tolerate discrimination against employees, applicants, or any other covered persons because of race, color, sex (including pregnancy), age, national origin or ancestry, ethnicity, religion, creed, sexual orientation, gender identity or expression, status as a veteran, and basis of disability or any other federal, state or local protected class. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, training, promotion, discipline, compensation, benefits, and termination of employment. If you would like to request reasonable adjustments or accommodations to assist your participation in the hiring process and, or in the advertised position, please inform the appropriate Talent Acquisition Partner for the role once they have been in touch. Your request will be reviewed and considered in confidence.\nInforma TechTarget complies with the Americans with Disabilities Act (ADA), as amended by the ADA Amendments Act, and all applicable federal, state or local law.\nWe believe that great things happen when people connect face-to-face. That's why we work in-person with each other, or with customers and partners, three days a week or more. When you’re not spending time together in one of our offices or other workplaces - like at an Informa event - you get the flexibility and support to work from home or remotely.\nOur benefits include:\nGreat community: a welcoming culture with in-person and online social events, our fantastic Walk the World charity day and active colleague groups and networks promoting a positive, supportive, and collaborative work environment\nBroader impact: take up to four days per year to volunteer with a philanthropic organization\nCareer opportunity: the opportunity to develop your career with bespoke training and learning, mentoring platforms and on-demand access to thousands of courses on LinkedIn Learning. When it’s time for the next step, we encourage and support internal job moves \n Time out: Open Vacation, plus 10 national holidays, and the chance to work from (almost!) anywhere for up to four weeks a year \nCompetitive benefits, including a 401k match, health, vision and dental insurance, parental leave and an ESPP offering company shares at a minimum 15% discount \nStrong wellbeing support through EAP assistance, mental health first aiders, free access to a wellness app a...","description_format":"text","description_chars":12286,"description_truncated":true,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["401k plan","Continuous learning","Dental insurance","Parental leave","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Publishing","Information Security","Exhibitions","Market Research"],"lifecycle":[{"event":"open","at":"2026-11-04T20:21:55Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":15,"reasons":["conf:3","velocity","win:early","comp:brand"],"computed_at":"2026-11-06T05:58:05Z"},"pay":{"stated_usd_annual":170000,"is_top_pay":true},"html_url":"https://alion.io/job/informa-sr-risk-analyst-2","json_url":"https://alion.io/job/informa-sr-risk-analyst-2.json","meta":{"generated_at":"2026-11-06T11:53:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21689,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4365},"rest":"https://alion.io/mcp/rest/get_company?id=4365"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finforma-sr-risk-analyst-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finforma-sr-risk-analyst-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finforma-sr-risk-analyst-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/informa-sr-risk-analyst-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finforma-sr-risk-analyst-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3767003}},{"tool":"search_jobs","arguments":{"company":"informa.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3767003},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}