The IT GRC - Risk Analyst works closely with IT, cybersecurity, procurement, legal, compliance, business owners, and vendors to support vendor risk assessments, evidence collection, questionnaire reviews, issue tracking, remediation follow-up, and ongoing monitoring activities. Understanding of common vendor risk areas, including access management, data protection, encryption, vulnerability management, incident response, logging and monitoring, business continuity, disaster recovery, subcontractor risk, and cloud/SaaS security.