Third-Party Security Risk Analyst

📋 Description

• Support the onboarding, reassessment, ongoing monitoring, and offboarding of third-party vendors
• Conduct initial vendor impact assessments and assign appropriate risk tiers based on data
• Perform standardized third-party security risk assessments by reviewing security questionnaires
• Evaluate inherent and residual risks, document findings and risk ratings, and ensure assessment
• Coordinate with internal stakeholders and risk domain owners to track assessment progress, obtain
• Monitor vendor security findings, remediation plans, and outstanding commitments, escalating

🎯 Requirements

• Practical experience in third-party risk management, vendor management, procurement, information
• Basic understanding of third-party risk management principles, governance policies, and recognized
• Familiarity with vendor lifecycle management processes, including onboarding, ongoing monitoring
• Exposure to reviewing contractual requirements related to information security, data privacy, and
• Understanding of security findings, vulnerability management, and remediation tracking processes.
• Awareness of software and hardware supply chain security risks.

🎁 Benefits

• Competitive annual salary: $58,000–$110,000, depending on experience, qualifications
• Employer-sponsored health, dental, and vision insurance plans, with low or no employee premiums.
• Generous paid time off.
• Monthly $100 mobile phone or internet stipend.
• Stock options available to all employees.
• Bonus eligibility for most roles, excluding Director-level positions and above.