Senior Security Risk Management Analyst
Core
Lead comprehensive risk assessments and manage security compliance for third-party vendors and service providers to ensure business resilience.
Role type
Senior IC security risk management analyst (third-party/vendor risk)
Builds
Vendor risk profiles, compliance documentation, and automated assessment processes
Domain
Cybersecurity / Third-Party Risk Management
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure | physical/clinical work
Required skills
Third-party risk assessment, vendor governance, security questionnaire evaluation, audit report analysis (SOC 2, ISO 27001), risk remediation coordination, contract security review, vendor classification, continuous security monitoring, cross-functional collaboration, process automation
Preferred skills
Risk assessment methodologies, regulatory compliance knowledge (FedRAMP, NIST CSF, PCI DSS), complex risk communication, multi-project management, team mentorship
Technologies
Coupa, OneTrust, JIRA, Coverbase
Responsibilities
Lead and conduct comprehensive risk assessments of new and existing third-party vendors; Evaluate third-party security questionnaires and audit reports; Coordinate with vendors to verify security controls and remediation plans; Oversee facilitation of risk remediation efforts; Collaborate during supplier contract development; Classify vendors according to risk tiers; Participate in continuous security monitoring of existing suppliers; Partner with Procurement, Legal, Privacy, and InfoSec teams; Identify opportunities to automate parts of the assessment process; Manage and mentor contractors and junior team members
Seniority
Senior, hands-on IC with mentorship responsibilities
