Vendor Risk Analyst

About the role

We're looking for a highly motivated, collaborative and technically experienced Third-Party Risk Analyst with ability to understand and apply the Vendor Risk Assessment (VRA) processes. The successful candidate must be reliable, resourceful and have a "can-do" attitude. You will be a key member of our team and play an important role in applying the Vendor Risk Assessment framework.

What you'll do

• Perform new and recurring third party risk assessments. Lead or assist with vendor risk assessment activities
• Review of third party provided audit reports and supporting collateral e.g., SOC reports and other certifications, or review of third-party security whitepapers
• Using platforms and/or ‘SIGs’ / ‘STIGs’ issue and review questionnaires completed by third parties describing their environment and controls
• Collaborate with the Procurement Team and the other teams such as Security and Privacy
• Work in a self-directed, collaborative, and constructive manner with our internal stakeholders

What you need

• 2–3 yrs of experience
• Compliance
• ISO 27001
• CISSP
• CISA
• CISM
• Risk management
• Any graduate