Risk Analyst

Job Summary

To support a growing corporate services team, the full-time Risk Analyst will perform third-party security and compliance risk assessments, coordinate user access reviews, and document risk findings while working remotely.

Key responsibilities

• Perform third-party security and compliance risk assessments for vendors, evaluating risk exposure and control effectiveness
• Coordinate and execute user access reviews, ensuring identified issues are remediated promptly
• Document risks, findings, recommendations, and remediation plans within governance, risk, and compliance platforms

Required qualifications

• 5+ years of experience in cybersecurity risk, IT risk, information security, governance, risk and compliance (GRC), or related fields
• Hands-on experience performing third-party or vendor security risk assessments
• Experience coordinating or performing user access reviews or identity governance activities
• Familiarity with cybersecurity and compliance frameworks such as NIST CSF, SOC 2, or HIPAA
• Strong analytical skills with the ability to evaluate complex situations and communicate recommendations effectively