Senior Irm Analyst

MongoDB

Dublin, Ireland
On-site
Information security risk assessments
Risk assessment methodology implementation
Regulatory compliance (dora, fedramp)
The Information Security Risk Team is responsible for the entire lifecycle of risk identification, assessment, and treatment, providing leadership with a clear, quantified view of top organizational risks

Job Summary

  • The Information Security Risk Team is responsible for the entire lifecycle of risk identification, assessment, and treatment, providing leadership with a clear, quantified view of top organizational risks.
  • As the Senior Information Risk Analyst, you will be the subject matter expert, conducting and owning internal security assessments, applying risk methodology, and producing risk memos.
  • This role requires a deep operational understanding of risk assessment methodologies and standard control frameworks, along with comprehensive knowledge of global regulations like DORA, NIS2, and FedRAMP Rev 5.

Matching Summary

The Information Security Risk Team is responsible for the entire lifecycle of risk identification, assessment, and treatment, providing leadership with a clear, quantified view of top organizational risks.

Skills & Requirements

Must-have

  • Information Security Risk Assessments
  • Risk Assessment Methodology Implementation
  • Regulatory Compliance (DORA, FedRAMP)
  • Supply Chain Risk Management
  • Technical Security Risk Assessments
  • Risk Memos and Reporting

Nice-to-have

  • Operational Commander of risk function
  • Risk Intelligence unit
  • Empower business to Think Big
  • Supportive and enriching culture

Key Requirements

  • 10+ years of Information Security, GRC experience
  • Enterprise-level security risk assessments end-to-end
  • Evaluate control effectiveness using technical evidence
  • Perform threat modeling using established methodologies
  • Deep operational understanding of risk assessment methodologies
  • Comprehensive knowledge of DORA, NIS2, FedRAMP Rev 5
  • Ability to write executive-level risk reports
  • Bachelor’s degree in a relevant field
  • CRISC, CCSP, CISSP, CISA, cloud certifications

Work Rights

Not specified

Tailored Resume

Cover Letter