Cyber Risk & TPRM Analyst with Archer GRC

Motion Recruitment; Merrillville (IN); Vor Ort; USD 110.000 - 140.000; Vollzeit

Benefits dieser Stelle

Benefits included

Zusammenfassung

Motion Recruitment Partners is seeking a Cyber Risk Analyst in Merrillville, IN to lead enterprise cyber assessments and TPRM programs. You willPartner with IT, Supply Chain, and Compliance to evaluate supplier risk profiles and drive enterprise GRC adoption, embedding risk processes into onboarding and contract renewals.

The role requires extensive TPRM experience, SOC 2 familiarity, and proficiency with Archer RSA GRC, with a focus on NIST CSF and energy-sector standards.

Qualifikationen

• 6+ years of dedicated TPRM experience supporting cyber risk assessments.
• 6+ years evaluating Vendor Control Assessments and SOC 2 reports.
• Experience with Archer RSA GRC or equivalent enterprise GRC tools.
• Knowledge of NIST 800 CSF and industry standards (NERC CIP).
• Experience in energy, gas, or electric utility industry is a plus.

Aufgaben

• Execute end-to-end Third-Party Risk Management (TPRM) and Vendor Control Assessments across critical suppliers.
• Manage and advance the adoption of the Archer GRC platform for policy compliance and risk reporting.
• Partner with Supply Chain, IT, OT, and Cyber Compliance to embed cyber assessments in onboarding and renewals.
• Review SOC 2 reports and third-party security documentation to identify gaps and track exceptions.
• Develop and maintain metrics, dashboards, and reporting to communicate risk to leadership.

Kenntnisse

TPRM experience

Vendor risk assessments

SOC 2 familiarity

Archer RSA GRC

NIST CSF knowledge

Energy/utility industry experience

Cross-functional collaboration

Tools

Archer RSA GRC

Jobbeschreibung

Motion Recruitment Partners is seeking a Cyber Risk Analyst in Merrillville, IN to lead enterprise cyber assessments and TPRM programs. You willPartner with IT, Supply Chain, and Compliance to evaluate supplier risk profiles and drive enterprise GRC adoption, embedding risk processes into onboarding and contract renewals.

The role requires extensive TPRM experience, SOC 2 familiarity, and proficiency with Archer RSA GRC, with a focus on NIST CSF and energy-sector standards.