15 cybersecurity roles, each mapped to the NIST NICE Framework v2.1.0. Choose the one that best describes your day-to-day work.

Aramis Insight assesses cybersecurity professionals against the NIST NICE Framework v2.1.0 — the definitive taxonomy of cybersecurity work roles, each defined by specific Tasks, Knowledge, and Skills (TKS) statements. The 15 roles below cover the four NICE categories most relevant to practising professionals.

Not sure which to pick? Read the definitions below, then choose the one that best describes what you actually do every day — not the title on your business card.

Oversight & Governance

Cyber Risk Analyst

NICE: OG-WRL-012 · Security Control Assessment

You evaluate security controls against frameworks and standards, quantify risk, and advise leadership on where the organisation is exposed. Your deliverables are risk registers, control assessments, audit findings, and remediation recommendations.

Cybersecurity Manager

NICE: OG-WRL-014 · Systems Security Management

You lead a cybersecurity team or programme. Strategy, staffing, budgets, vendor management, executive reporting, and cross-functional coordination define your role. You translate technical risk into business language for senior leadership.

Cyber/Privacy Attorney

NICE: OG-WRL-006 · Cybersecurity Legal Advice

You provide legal counsel on cybersecurity and data privacy matters: regulatory compliance, breach notification obligations, contract review, cross-border data transfer requirements, and the evolving patchwork of privacy legislation.

GRC Analyst

NICE: OG-WRL-012 · Security