Lead Risk Analyst

Who We Are

In today's work environment, employees use a myriad of devices to access IT applications and data over multiple networks to stay productive, wherever and however they work. Ivanti elevates and secures Everywhere Work so that people and organizations can thrive.

While our headquarters is in the U.S., half of our employees and customers are outside the country. We have 36 offices in 23 nations, with significant offices in London, Frankfurt, Paris, Sydney, Shanghai, Singapore, and other major cities around the world.

Ivanti's mission is to be a global technology leader enabling organizations to elevate Everywhere Work, automating tasks that discover, manage, secure, and service all their IT assets. Through diverse and inclusive hiring, decision-making, and commitment to our employees and partners, we will continue to build and deliver world-class solutions for our customers.

Our Culture - Everywhere Work Centered Around You

At Ivanti, our success begins with our people. This is why we embrace Everywhere Work across the globe, where Ivantians and our customers are thriving. We believe in a healthy work-life blend and act on it by fostering a culture where all perspectives are heard, respected, and valued. Through Ivanti's Centered Around You approach, our employees benefit from programs focused on their professional development and career growth.

We align through our core values by locking arms in collaboration, being champions for our customers, focusing on the outcomes that matter most and fighting the good fight against cyber-attacks. Are you ready to join us on the journey to elevate Everywhere Work?

Why We Need You

Are you a talented risk analyst looking for a new challenge? Join Ivanti as a Lead Risk Analyst and take the opportunity to shape and improve our risk management program by identifying, assessing, and quantifying risks for our leadership team. You will be leading the execution of Business Impact Analyses as well as Risk Analyses and assessing risks for likelihood and impact. You'll make risk central to decision-making by engaging with stakeholders while providing guidance for our other analysts. We're seeking someone with expertise in risk management and analysis to lead our risk analysis process, integrate and automate the third-party risk cycle, and help create efficiencies for the risk management process. This is a great opportunity to have a real impact and make a difference at a well-established technology company. If you're motivated, independent, and have a passion for risk management and analysis, we would love to hear from you. Plus, take advantage of our outstanding health and wellness benefits, equity ownership program, and access to LinkedIn Learning for personal and professional development.

What You Will Be Doing

• Execute Business Impact Analyses and Risk Analyses
• Assess impact and likelihood of risks
• Tracking metrics related to the Third-Party Risk Management program
• Establish comprehensive program linking assets, risks, and controls, improving risk-related policies and procedures
• Expand team's expertise in risk management, advising executive leadership on risk management efforts
• Improve institutional knowledge of Business Continuity and Disaster Recovery for critical systems, assets, and processes
• Champion creation of streamlined processes for Business Impact Analyses, enhancing program effectiveness
• Develop and implement strategies for risk identification and management, providing guidance to junior team members
• Drive risk-related projects, collaborating with teams to mature third-party risk program and communicate tasks effectively to stakeholders
• Identify and prioritize critical business functions in collaboration with organizational stakeholders
• Develop risk mitigation strategies to resolve vulnerabilities and recommend security changes to system or system components as needed
• Promote awareness of security issues among management and ensure sound security principles are reflected in the organization's vision and goals
• Determine the extent of threats and recommend courses of action or countermeasures to mitigate risks
• Collaborate with cybersecurity personnel on the security risk assessment process to address privacy compliance and risk mitigation
• Review findings from the continuous monitoring program and mitigate risks on a timely basis

To Be Successful in The Role, You Will Have

• Ability to research and synthesize regulatory and framework changes
• Ability to think critically and exercise judgement when concepts are complex or not well-defined
• Ability to function effectively in a dynamic, fast-paced environment
• Ability to effectively collaborate via virtual teams
• Ability to communicate effectively when writing
• Ability to collect, verify, and validate data
• Ability to evaluate, analyze, and synthesize large quantities of data into high quality intelligence products
• Strong experience in risk analysis with knowledge of assessment methodologies and scoring
• Knowledge of vendor and partner risk management cycles
• Knowledge of industry-standard and organizationally accepted analysis principles and methods
• Knowledge of cybersecurity and privacy principles
• Proficient in risk identification, assessment, and quantification
• Skill in evaluating and interpreting data
• Skill in evaluating data sources for relevance, reliability, and objectivity
• Skill in using multiple analytic tools, databases, and techniques
• Skill to identify sources, characteristics, and uses of the organization's data assets
• Skill in performing impact/risk assessments
• Skill in researching essential information
• Skill in assessing current tools to identify needed improvements
• Skill in assessing security controls based on cybersecurity principles and tenets. (e.g., CIS CSC, NIST SP 800-53, Cybersecurity Framework, etc.)

Roadmap for Success

• First 90 Days
  • Gain an understanding of Ivanti's Information Security policies and procedures
  • Learn about the processes for which the risk team is responsible
  • Familiarize yourself with the various teams and contacts in the Information Security organization and at Ivanti
• First 6 Months
  • Formulate plans on how the BIAs and RAs should be executed
  • Exhibit motivation and ability to independently drive tasks forward to completion
  • Begin understanding Ivanti's corporate systems and processes and the owners of those systems
• First 12 Months
  • Have a firm understanding of the products Ivanti offers
  • Have a firm understanding of Ivanti's critical systems, their associated processes, related risks, and owners
  • Provide expectations and advice to risk owners on risk treatment plans
  • Demonstrate the ability to plan and manage projects

This job posting will remain active until a qualified candidate is identified.

At Ivanti, we are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and teammates without regard to race, color, religion, sex, pregnancy (including childbirth, lactation and related medical conditions), national origin, age, physical and mental disability, marital status, sexual orientation, gender identity, gender expression, genetic information (including characteristics and testing), military and veteran status, and any other characteristic protected by applicable law. Ivanti believes that diversity and inclusion among our teammates is critical to our success as a global company, and we seek to recruit, develop and retain the most talented people from a diverse candidate pool.

If you require special assistance for the best interview experience, please contact us at .

#LI-PD1

#LI-Remote

PWDNET

Individuals seeking employment at Ivanti are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. You are being given the opportunity to provide the following information in order to help us comply with federal and state Equal Employment Opportunity/Affirmative Action record keeping, reporting, and other legal requirements.

---