Information Security Risk Analyst

Job Summary

Supporting vendor risk management and customer RFx security inquiries, the full-time Information Security Vendor Compliance and Customer Risk Analyst will review vendor documentation, identify risks, and collaborate with teams to ensure compliance in a remote environment.

Key responsibilities

• Review proposed and current vendor information security documentation to identify risks
• Collaborate with vendors and internal teams to address customer RFx security inquiries
• Assist in producing evidence for compliance audits and refining vendor management programs

Required qualifications

• An associate or bachelor's degree in Information Security, Information Assurance, or a related field, or 1+ years of relevant experience
• Understanding of Information Security supply chain concerns and compliance frameworks
• Basic knowledge of SOC2, ISO 27001, NIST 800-171/53, or similar security standards
• Experience with vendor risk management tools such as Onetrust or Upguard is a plus
• Ability to work independently in a fast-paced environment and manage multiple projects