Cyber Assessments Analyst - Third Party Risk Management
Location
Columbus, OH or Merrillville, IN; local candidates required
Work Type
Hybrid; onsite 3 days per week
Position Summary
Help a gas and electric utility assess supplier cyber risk and improve its third-party risk management program. You will maintain risk profiles, track issues and exceptions, and turn assessment results into clear reporting for business and security teams.
Contract Details
This is a 12-month contract opportunity
U.S. Citizenship required
Responsibilities
- Execute supplier inherent-risk and control assessments across business, IT and OT environments.
- Review vendor evidence, including SOC 2 reports, and document risk findings.
- Maintain supplier risk profiles and track issues, exceptions and remediation progress.
- Produce dashboards, metrics and assessment readouts for stakeholders.
- Partner with supply chain on vendor onboarding, renewals and continuous monitoring.
- Support Archer and Fortress assessment workflows, roadmaps and adoption.
- Assist with audit issue resolution and improve assessment processes.
- Communicate assessment methodology and results across security, compliance and business teams.
Required Qualifications
- Bachelor’s degree or equivalent work experience providing relevant foundational knowledge.
- 6+ years of TPRM experience and 6+ years with vendor control assessments, SOC 2 reports and metrics.
- In-depth TPRM process, reporting and metrics experience; participation in successful TPRM projects and multiple process improvements.
- Solid understanding of NIST cybersecurity frameworks; strong analytical, process-development and root-cause analysis skills.
- Working knowledge of gas and electric utilities and familiarity with the hiring organization’s business operations.
- Proficiency with Microsoft Office 365, strong communication and collaboration skills, and ability to work independently with minor assistance.
- US citizenship; residence in the Columbus, OH or Merrillville, IN area and ability to report onsite 3 days per week.
Preferred Qualifications
- Experience using Archer GRC.
- Experience with SharePoint.
- Demonstrated reporting and analytics experience.
- Demonstrated proficiency in Excel and Word.