Cyber Risk Analyst

Purpose

We are looking for a hands-on Cyber Risk Analyst to join our cybersecurity team in Bucharest, Romania. This individual-contributor role is equally focused on vulnerability management and cybersecurity governance.

You will help identify, assess and follow up on security exposures while supporting the policies, standards and controls that protect our operations. You will work closely with an established local team and internal stakeholders across our international business.

Key Missions

Vulnerability management and cyber threat intelligence (approximately 50%)

• Support day-to-day vulnerability-management operations, including scanning, review, prioritisation, tracking and follow-up of findings.
• Use vulnerability scanning and exposure-management platforms, ideally Tenable, or comparable tools such as Rapid7 or Qualys.
• Monitor and assess relevant cyber threat intelligence (CTI), triage security advisories and help determine their operational impact.
• Support external attack-surface monitoring, including reviewing exposure data from platforms such as BitSight.
• Work with technical teams and security stakeholders to communicate risks, support mitigations and track progress.
• Contribute to vulnerability reporting, metrics and dashboards to provide visibility for key stakeholders.

Governance, risk and compliance (approximately 50%)

• Help maintain, review and improve cybersecurity policies, standards and procedures.
• Contribute to security governance activities, control reviews and access-control reviews.
• Contribute to risk and control assessments, document findings and recommend practical mitigation measures.
• Contribute to the risk management process, through risk assessments, maintenance of risk registers, and risk remediation oversight.
• Support alignment with relevant security frameworks, particularly ISO/IEC 27001.
• Support internal security audits and certification activities, including evidence collection, follow-up of identified gaps and reporting.
• Contribute to third-party cybersecurity risk assessments and follow-up of supplier security risks.
• Prepare clear security documentation, updates and analysis for internal stakeholders.

Profile & Other Information

• Around 3–5 years of hands-on experience in cybersecurity, information security, vulnerability management or a closely related function.
• Practical experience in vulnerability-management operations with Tenable, Rapid7, Qualys or a similar platform.
• Knowledge of cyber threat intelligence, security advisories and attack-surface monitoring.
• Familiarity with information security governance, policies, standards and procedures.
• Strong written and spoken English, including the ability to produce clear documentation.
• A proactive, collaborative approach, with sound security fundamentals and a genuine interest in improving security practices.
• Currently based in Romania and able to work with the local team in accordance with company policy.

Nice to have

• Experience supporting an ISO/IEC 27001-certified environment.
• Exposure to access-control governance in a complex international organisation.
• Experience using automation, scripting or AI-assisted workflows to improve security operations.

Why join us?

You will be part of a supportive, collaborative international security function with opportunities to learn from experienced colleagues. The role offers a meaningful combination of operational security and governance work, with the chance to take ownership, contribute ideas and help strengthen security across the organization.