Cybersecurity risk Analyst

Conduct comprehensive cybersecurity risk assessments of third-party vendors throughout the vendor lifecycle
Perform vendor security assessments for standard and expedited review processes
Analyze vendor security documentation, certifications, and compliance frameworks
Provide risk ratings, requirements and recommendations for vendor engagements
Manage vendor security questionnaires and documentation review processes
Ensure vendor assessments comply with industry standards and regulatory requirements
Maintain comprehensive documentation of risk assessments and mitigation strategies
Partner with business units, procurement, legal, and IT teams on vendor risk matters
Present risk findings and recommendations to management and steering committees
Serve as subject matter expert on third-party cybersecurity risks

Preferred Education & Experience:
Bachelor's degree in Information Security, Computer Science, Business Administration, or related field
3-5 years of experience in cybersecurity risk management or third-party risk assessment

Preferred Certifications:
CISA (Certified Information Systems Auditor)
CTPRA (Certified Third-Party Risk Assessor)

Technical Skills:
Strong understanding of cybersecurity frameworks (NIST, ISO 27001, SOC 2)
Experience with risk assessment tools and platforms (GRC, BitSight, Dun & Bradstreet, etc.)

Core Competencies:
Excellent analytical and critical thinking skills
Strong written and verbal communication abilities
Project management and organizational skills
Attention to detail and ability to work under pressure
Professional communication style for executive-level reporting

EEO:

Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.