Cyber Risk Analyst

Proteam Solutions Inc.; Columbus (OH); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Proteam Solutions Inc. is seeking a Cyber Assessments Analyst in a 12-month contract to evaluate supplier cyber risk and strengthen third-party risk management. Hybrid work with onsite 3 days per week in Columbus, OH or Merrillville, IN.

Responsibilities include risk assessments across IT/OT, vendor evidence reviews, and dashboard reporting for stakeholders. U.S. citizenship required to support the program.

Qualifications

• Bachelor’s degree or equivalent work experience.
• 6+ years of TPRM experience and 6+ years with vendor control assessments, SOC 2, and metrics.
• In-depth TPRM process, reporting and metrics experience; participation in successful TPRM projects.
• Strong knowledge of NIST cybersecurity frameworks.
• Working knowledge of gas and electric utilities and familiarity with operations.
• Proficiency with MS Office 365 and strong communication and collaboration skills.
• US citizenship; residence in Columbus, OH or Merrillville, IN area with onsite 3 days/week.

Responsibilities

• Execute supplier inherent-risk and control assessments across business, IT and OT environments.
• Review vendor evidence, including SOC 2 reports, and document risk findings.
• Maintain supplier risk profiles and track issues, exceptions and remediation progress.
• Produce dashboards, metrics and assessment readouts for stakeholders.
• Partner with supply chain on vendor onboarding, renewals and continuous monitoring.
• Support Archer and Fortress assessment workflows, roadmaps and adoption.
• Assist with audit issue resolution and improve assessment processes.
• Communicate assessment methodology and results across security, compliance and business teams.

Skills

TPRM experience

Vendor assessments

SOC 2 reporting

NIST frameworks

Root-cause analysis

MS Office

Education

Bachelor’s degree or equivalent

Tools

Archer GRC

SharePoint

Excel

Word

Job description

Cyber Assessments Analyst - Third Party Risk Management

Location: Columbus, OH or Merrillville, IN; local candidates required

Work Type: Hybrid; onsite 3 days per week

Position Summary

Help a gas and electric utility assess supplier cyber risk and improve its third-party risk management program. You will maintain risk profiles, track issues and exceptions, and turn assessment results into clear reporting for business and security teams.

This is a 12-month contract opportunity

U.S. Citizenship required

Responsibilities

• Execute supplier inherent-risk and control assessments across business, IT and OT environments.
• Review vendor evidence, including SOC 2 reports, and document risk findings.
• Maintain supplier risk profiles and track issues, exceptions and remediation progress.
• Produce dashboards, metrics and assessment readouts for stakeholders.
• Partner with supply chain on vendor onboarding, renewals and continuous monitoring.
• Support Archer and Fortress assessment workflows, roadmaps and adoption.
• Assist with audit issue resolution and improve assessment processes.
• Communicate assessment methodology and results across security, compliance and business teams.

Required Qualifications

• Bachelor’s degree or equivalent work experience providing relevant foundational knowledge.
• 6+ years of TPRM experience and 6+ years with vendor control assessments, SOC 2 reports and metrics.
• In-depth TPRM process, reporting and metrics experience; participation in successful TPRM projects and multiple process improvements.
• Solid understanding of NIST cybersecurity frameworks; strong analytical, process-development and root-cause analysis skills.
• Working knowledge of gas and electric utilities and familiarity with the hiring organization’s business operations.
• Proficiency with Microsoft Office 365, strong communication and collaboration skills, and ability to work independently with minor assistance.
• US citizenship; residence in the Columbus, OH or Merrillville, IN area and ability to report onsite 3 days per week.

Preferred Qualifications

• Experience using Archer GRC.
• Experience with SharePoint.
• Demonstrated reporting and analytics experience.
• Demonstrated proficiency in Excel and Word.