Cyber Risk Analyst

About the role

The Cybersecurity Risk Analyst will be integral in developing, supporting, and leading initiatives to assess, analyze, and manage risks across Amcor to improve overall cybersecurity maturity by aligning closely with key business requirements.  This role is designed not only to maintain but to elevate Amcor’s cybersecurity posture, ensuring the organization’s resilience against an ever-evolving cyber threat landscape.

This role plays a crucial role in protecting our organization’s information assets by managing risks effectively. The role involves developing and maintaining cyber security plans, conducting assessments, collaborating with teams, ensuring compliance with industry standards, and continually managing cybersecurity risk.

Key Job Accountabilities

• Apply qualitative risk valuation models to inform and support strategic/tactical risk-based decisions.
• Assist project teams in the implementation of security measures to meet corporate security policies, manage risk, and meet external regulations.
• Communicates risk assessment findings to team owners and custodians.
• Identify opportunities to improve risk posture, developing solutions for remediating or mitigating risks, and assessing the residual risk.
• Establish and maintain continuous communication channels for effective risk management.
• Maintains strong working relationships with individuals and groups involved in managing information risks across the organization.
• Performs focused information risk assessments of existing or new services and technologies.
• Provides consultative advice to information security teams that enables them to make informed risk management decisions.
• Participate in the development of a strategic risk management plan that includes identification, measurement, treatment, and reporting of new and existing cybersecurity risks.
• Support incident response efforts and conduct post-incident analysis to identify areas for improvement.
• Work with peers to improve and mature the organization’s security metrics and reporting capabilities.

Qualifications/Requirements

• 3+ years relevant experience in risk assesment
• Bachelors – IT or related field or comparable work experience
• Proven expertise in cybersecurity concepts, practices, and procedures
• Preferred – CRISC or similar certifications
• Excellent interpersonal and communication skills, capable of working collaboratively with and presenting to stakeholders at all levels
• Ability to apply original and innovative thinking to produce new ideas.
• Ability to effectively influence others to modify their opinions, plans or behaviours.
• Ability to identify and assess the severity and potential impact of risks.
• Ability to work on several tasks simultaneously and pay attention to sources of information from inside and outside one’s network within an organization.
• Communicate risk assessment status to IT and Business leadership teams as well as risk owners outside the cybersecurity program in a way that consistently drives objective, fact-based decisions about risk that optimize the trade-off between risk mitigation and business performance.
• Strong technical information security knowledge to assess various information security and risk management processes and tools.
• Weight business needs against security concerns and articulate issues and options to management.

#LI-Remote