Sr. Cybersecurity Analyst, Risk Management

We are currently seeking an experienced Senior Cybersecurity Risk Management Analyst to assist with identifying, managing, and responding to cybersecurity risks, including managing risks within a defined risk tolerance. The Sr. Cybersecurity Risk Management Analyst will regularly perform cybersecurity risk assessments, monitor/measure risk treatment activities, and produce updated metrics and reports for leadership. 

You Will: 

• Perform cybersecurity risk assessments to identify cybersecurity risks, provide remediation recommendations, and facilitate risk treatment 
• Assist in identifying, monitoring, reporting, and responding to cybersecurity risks through the development of action plans to manage risks within acceptable tolerance levels 
• Communicate identified risks to stakeholders, including working with the business to determine whether to accept, remediate, or mitigate identified risks 
• Facilitate the development of action plans to manage risk within acceptable risk tolerance levels 
• Review risk management processes periodically for effectiveness and conduct cybersecurity risk assessments regularly 
• Assist cybersecurity and management with defining acceptable risk tolerance levels 
• Provide guidance to key stakeholders in the development and implementation of risk treatment plans based on risk acceptance criteria 
• Monitor and measure risk treatment activities and document metrics and reporting 

You Bring: 

• 5+ years of experience consulting or working in Cybersecurity and/or IT risk management 
• Bachelor's degree or equivalent industry experience, post Graduate degree a plus 
• Strong understanding of information security risk management and risk assessment frameworks, processes, and risk rating levels 
• Experience performing security risk assessments utilizing established industry frameworks (ISO, NIST, etc.) 
• Competency in cybersecurity frameworks including ISO 27001, NIST CSF, NIST 800-53, and PCI 
• Certified in one or more of the following: CRISC, CISA, CISM, CISSP, SANS GIAC Security Certifications, etc. 
• Communicate and present security risks concisely and effectively based on the appropriate level of management and stakeholder groups 
• Ability to work well in a demanding, dynamic environment, and meet overall objectives 
• Preferred, Excellent interpersonal skills with the ability to communicate effectively verbally and in writing with all levels within the organization, including both technical and non-technical personnel 
• Automobile and/or manufacturing industry experience is a plus 

At Lucid, we don’t just welcome diversity - we celebrate it! Lucid Motors is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, national or ethnic origin, age, religion, disability, sexual orientation, gender, gender identity and expression, marital status, and any other characteristic protected under applicable State or Federal laws and regulations.