Forrester · 1 month ago
Senior Analyst, Cyber Risk Quantification and GRC
Forrester is a leading research and advisory firm that focuses on helping business and technology leaders navigate critical challenges. The Senior Analyst will conduct research and provide strategic advice for risk management leaders, focusing on cyber risk quantification and governance practices.
Professional ServicesConsultingAdvicePeer to Peer
Responsibilities
Develop a deep understanding of what Forrester clients require to be successful as risk management leaders and professionals with a focus on how they help their organizations develop risk management capabilities that enable a resilient and opportunity-seeking business
Conduct primary research into risk management capabilities, practices, touchpoints, and artifacts in the context of supporting C-suite executives, business leaders, and appropriate committees
Help define the future of risk management, including how risk leaders and professionals can work with other key business functions and support organizational success
Work with different focus areas across Forrester research teams to develop a complete research portfolio on risk management, providing both input to others’ research and writing reports incorporating expertise from across Forrester to provide a “big picture” view
Partner as appropriate with other Forrester analysts on broader risk topics: risk quantification, third-party risk, systemic risk, compliance, and cyber risk
Research/write/create approximately six to eight research projects per year — a mix of written reports, tools, webinars, videos, podcasts, infographics, and other intellectual property. Build visibility for their research and contribute to Forrester client communities
Consult with clients to apply Forrester’s research in the context of their specific business environment and help solve their problems through inquiry, guidance, and advisory engagements
Establish an industry presence as an influential speaker and thinker; build relationships with journalists who cover the sector; and participate in vendor briefings and field press inquiries as necessary
Qualification
Required
Five to seven years as a research analyst, consultant, or practitioner where you have led or been involved in risk management, with a focus on cyber risk quantification, or an equal amount of time as product manager for vendors that serve the market
A deep intellectual curiosity about the effect of technology on the business landscape; solid business instincts and a practical understanding of what makes companies tick; and a creative view of markets, technologies, and attitudes combined with a fascination with the future
Superior listening, critical thinking, and writing skills as well as compelling presentation skills
The ability to take complex, disparate ideas and distill them into simple, provocative concepts — and be willing to take a stand on vendors and outcomes
The ability to travel up to 20% of the time
Preferred
Expertise in compliance management, internal or external audit, and GRC platforms is strongly desired
Benefits
For employees based in Washington State, the percentage listed here is an estimated bonus target as a percentage of base salary, in accordance with the Forrester Employee Bonus plan. Individual and company performance, as well as other eligibility criteria, will determine the actual incentive amount.
Bonus target: 10%
For information on benefits, please visit: <https://forresterbenefits.com/>
Company
Forrester
Forrester is a research and advisory firm that provides businesses with business and technology-related consulting services.
Funding
Current Stage
Public CompanyTotal Funding
unknown1996-12-06IPO
Recent News
2026-06-05
2026-06-02
Company data provided by crunchbase