Vendor Risk Analyst
About the role
- Demonstrated understanding of cyber security risk management concepts, cybersecurity frameworks, and security technologies.
- Strong knowledge of information security fundamentals, best practices, and industry standards with prior responsibilities of protecting information assets from unauthorized disclosure, accidental or intentional loss of data, and modification.
- Detailed knowledge and experience in security and regulatory frameworks including ISO 27001, NIST 800-53, FFIEC and other control standards.
- Excellent verbal and written communication skills requiredExcellent interpersonal skills requiredExcellent documentation and organizational skills required
- PreferredKnowledge of multiple security areas such as: Legal, security architecture, identity management/governance, incident response, security risk, and audit/compliance functions.
- Strong experience working within large enterprise environments and information security systems.
- CISSP and/or CISM security certification
- Other cyber risk and/or security industry certifications and training
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.
