Senior Technology Risk Analyst

Job Summary

Supporting the execution and continuous improvement of the organization's Risk Management program, the full-time Senior Technology Risk Analyst will perform vendor security assessments, validate third-party controls, and maintain a mature vendor risk management program while collaborating with various stakeholders.

Key Responsibilities

• Execute the Third-Party Risk Management lifecycle, including vendor onboarding and periodic reassessments
• Conduct security assessments for various third-party vendors and evaluate their compliance with security requirements
• Monitor vendor security posture and maintain accurate vendor risk records within the organization's GRC platform

Required Qualifications

• Strong experience in performing vendor security assessments and reviewing security documentation
• Knowledge of SOC 2 Type II reports, ISO 27001 certifications, and security policies
• Experience collaborating with cross-functional teams including Procurement, Legal, and IT
• Familiarity with risk management frameworks and regulatory compliance
• Ability to translate complex technical findings into business risk assessments