Cyber Risk & TPRM Analyst (Archer GRC)

Motion Recruitment; Columbus (OH); On-site; USD 95,000 - 115,000; Full time

Job summary

Motion Recruitment is assisting a client in the energy and utility sector in Columbus, OH by recruiting a Cyber Risk Analyst for a 1-year W2 contract with benefits. You will develop and execute enterprise cyber assessments and the Third-Party Risk Management program to minimize supply chain exposure.

Collaborating with IT, Supply Chain, and Compliance, you will evaluate supplier risk, drive Archer GRC adoption, review SOC 2 reports, and report risk metrics to senior leadership.

Qualifications

• 6+ years dedicated TPRM experience in cyber risk.
• 6+ years evaluating Vendor Control Assessments and SOC 2 reports.
• Experience using Archer RSA GRC or equivalent.
• Strong knowledge of NIST CSF and NERC CIP.
• Experience in energy, gas, or electric utilities preferred.

Responsibilities

• Execute end-to-end Third-Party Risk Management (TPRM) and Vendor Control Assessments, evaluating inherent risks and continuous risk profiles across critical suppliers.
• Manage and advance the adoption of the enterprise Archer GRC platform to maintain, track, and report on policy compliance, risk posture, and audit resolution.
• Partner cross-functionally with Supply Chain, IT, OT, and Cyber Compliance teams to embed cyber assessments directly into vendor onboarding and contract renewal processes.
• Review and evaluate third-party SOC 2 reports, third-party control assessments, and security documentation to identify security gaps and track exceptions.
• Develop and maintain operational metrics, dashboards, and reporting to communicate continuous monitoring results and risk profiles effectively to leadership.

Skills

TPRM experience

Vendor risk assessments

Stakeholder communication

Cross-functional collaboration

Risk remediation planning

Tools

Archer RSA GRC

Job description

Motion Recruitment is assisting a client in the energy and utility sector in Columbus, OH by recruiting a Cyber Risk Analyst for a 1-year W2 contract with benefits. You will develop and execute enterprise cyber assessments and the Third-Party Risk Management program to minimize supply chain exposure.

Collaborating with IT, Supply Chain, and Compliance, you will evaluate supplier risk, drive Archer GRC adoption, review SOC 2 reports, and report risk metrics to senior leadership.