Information risk analyst