Cyber security Analyst

Description

The Analyst Sr Analyst Cybersecurity Risk is part of the Technology Division This role plays a critical role in protecting American Airlines digital ecosystem by identifying and managing cybersecurity risks You will help shape the airlines cybersecurity strategy by analyzing internal and thirdparty risks

This list is intended to reflect the current job but there may be additional essential functions and certainly nonessential job functions that are not referenced Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so observing of course any legal obligations including any collective bargaining obligations

Conduct cybersecurity risk assessments across internal systems and thirdparty vendors

Support and enhance the ThirdParty Risk Management TPRM program including vendor onboarding and continuous monitoring

Analyze cybersecurity risks and provide actionable insights to stakeholders across the organization

Collaborate with teams in IT Legal Procurement and Business Units to ensure risk awareness and mitigation

Maintain risk registers and support the development of risk metrics and dashboards

Assist in the development and implementation of cybersecurity risk policies standards and procedures

All youll need for success

Minimum Qualifications Education Prior Job Experience

Bachelors degree in information technology or other related field experience

Experience in audit roles or a related control function relevant certification or industry accreditation eg CPA CFA CIA encouraged

Working knowledge of ITSMITAM regulatory compliance SOX PCI DSS GDPRPII and HIPAA and cybersecurity principles

Strong proficiency in basic PC applications Excel Word PowerPoint with a general understanding of simple data analysis techniques like VLOOKUP Pivot Tables etc

Excellent critical thinking and problemsolving skills with the ability to learn both AA and industry standards NIST 800171 NIST 800871

Strong written and oral communication skills PC skills team building skills and the ability to work independently

Mandatory Skills : GRC Risk - Third Party Risk Management (TPRM)