3rd Party Cyber Risk Analyst

• 1-2 years' experience, internship, or coursework in IT security, risk management, compliance, and audit.
• Understanding of third-party/vendor risk management processes and core risk management terminology.
• Exposure to audit processes or evidence collection for compliance reviews.
• Analytical mindset with attention to detail and a willingness to learn new concepts.
• Project, organizational, and content management skills; ability to manage multiple tasks and deadlines.
• Effective written and verbal communication skills; able to collaborate with technical and non-technical stakeholders.
• Ability to prepare and present clear, concise reports and summaries.
• Awareness of key security and compliance frameworks (e.g., SOC 2, NIST, ISO 27001, PCI, HIPAA, HITRUST, SOX).
• Basic knowledge of state and federal cybersecurity regulations and standards.
• Willingness to pursue industry certifications.
• Experience with Microsoft Office Suite; familiarity with tools such as SharePoint, Power BI, ServiceNow, UpGuard, or Archer are a plus.
• General understanding of IT concepts, including cloud services (IaaS, SaaS, PaaS), network security, and endpoint security.
• A bachelor's degree in computer science, information technology, or a related field.

If you require an accommodation to complete the application and recruitment process due to a disability, please email . This information will be held in confidence and used only to determine an appropriate accommodation for the application and recruitment process.

Please note that the above email is solely for individuals with disabilities requesting an accommodation. General employment questions should not be sent through this process.

We are proud to be an equal opportunity employer committed to being inclusive and attracting, retaining, and growing an inclusive workforce.

Originally posted on Himalayas