Cybersecurity risk Analyst

Conduct comprehensive cybersecurity risk assessments of third-party vendors throughout the vendor lifecycle

Perform vendor security assessments for standard and expedited review processes

Analyze vendor security documentation, certifications, and compliance frameworks

Provide risk ratings, requirements and recommendations for vendor engagements

Manage vendor security questionnaires and documentation review processes

Ensure vendor assessments comply with industry standards and regulatory requirements

Maintain comprehensive documentation of risk assessments and mitigation strategies

Partner with business units, procurement, legal, and IT teams on vendor risk matters

Present risk findings and recommendations to management and steering committees

Serve as subject matter expert on third-party cybersecurity risks

Preferred Education & Experience

Bachelor's degree in Information Security, Computer Science, Business Administration, or related field

3-5 years of experience in cybersecurity risk management or third-party risk assessment

Preferred Certifications

CISA (Certified Information Systems Auditor)

CTPRA (Certified Third-Party Risk Assessor)

Technical Skills

Strong understanding of cybersecurity frameworks (NIST, ISO 27001, SOC 2)

Experience with risk assessment tools and platforms (GRC, BitSight, Dun & Bradstreet, etc.)

Core Competencies

Excellent analytical and critical thinking skills

Strong written and verbal communication abilities

Project management and organizational skills

Attention to detail and ability to work under pressure

Professional communication style for executive-level reporting

EEO

“Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of – Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.”