Risk Analyst - Third Party

Job Summary

To support enterprise risk management initiatives, the full-time salaried Risk Analyst - Third Party will conduct information security risk assessments of third-party vendors, collaborate with stakeholders on risk mitigation strategies, and document findings and recommendations while working remotely.

Key responsibilities

• Conducts information security risk assessments of third-party vendors and evaluates assessment results to determine risk profiles
• Develops recommendations to address identified security gaps and collaborates with internal and external parties for remediation efforts
• Maintains knowledge of current information security trends and supports departmental initiatives through change management and continuous improvement activities

Required qualifications

• Bachelor's degree or equivalent experience
• 1 - 3+ years of relevant Information Security experience
• Ability to analyze and interpret technical documents, regulations, and policies
• Proficiency in Microsoft Office Suite (Word, Excel, PowerPoint, Outlook)
• Familiarity with Agile methodologies is preferred