Cyber Risk & Vendor Assurance Analyst

UL, LLC; Northbrook (IL); On-site; USD 86,000 - 115,000; Full time

Benefits offered by this job

Health benefits

Wellness benefits

401K

Paid time off

Job summary

UL Solutions is seeking a Global Cybersecurity Risk Analyst to identify, assess, communicate, and manage cybersecurity and information risks across the organization. You will help ensure operations, technologies, and third-party relationships are evaluated and mitigated to reduce risk exposure and business impact.

The role involves documenting risks, tracking remediation, and guiding stakeholders on risk acceptance or mitigation.

Qualifications

• Bachelor’s or master’s degree in business, Computer Science, Cybersecurity, Information Security, or related field.
• 2+ years of experience in cybersecurity, information security, technology risk, or related risk management role.
• 2+ years of experience managing risk and compliance matters or supporting applications, coordinating MSP activities, projects, systems, or third-party relationships requiring risk identification, assessment, remediation, and monitoring.
• Demonstrated understanding of operational, cybersecurity, information security, and technology risks.
• Strong business acumen with ability to assess cybersecurity risks and impacts in context of objectives.
• Experience evaluating complex third-party risks through vendor risk management, information security, regulatory compliance, or audit activities.
• Hands-on experience using ServiceNow to perform and manage Vendor Risk Assessments.
• Experience with frameworks such as ISO/IEC 27001, COBIT, NIST CSF, NIST SP 800-series, and FAIR.

Responsibilities

• Support risk assessments for new and existing technologies, services, initiatives, and third-party providers.
• Identify and document risk scenarios, assets, threats, vulnerabilities, controls, and business impact.
• Communicate findings clearly to risk owners, stakeholders, and cybersecurity teams.
• Provide risk-based guidance on acceptance, mitigation, transfer, or avoidance.
• Recommend controls and risk treatment activities to manage cybersecurity and information risks.
• Identify opportunities to improve risk posture and assist remediation strategies.
• Assess residual risk after implementing mitigating controls.
• Track risks, issues, remediation activities, and risk events through closure.
• Support third‑party/vendor risk lifecycle activities including due diligence and monitoring.
• Respond to external customer cybersecurity questionnaires and ensure regulatory alignment.
• Support risk reporting and documentation for visibility into material risks.

Skills

Risk assessment

Communication

Stakeholder management

Regulatory knowledge

Vendor risk management

Risk reporting

ServiceNow

Frameworks knowledge

Education

Bachelor’s or Master’s in Business/CS/Cybersecurity

Tools

ServiceNow

Job description

UL Solutions is seeking a Global Cybersecurity Risk Analyst to identify, assess, communicate, and manage cybersecurity and information risks across the organization. You will help ensure operations, technologies, and third-party relationships are evaluated and mitigated to reduce risk exposure and business impact.

The role involves documenting risks, tracking remediation, and guiding stakeholders on risk acceptance or mitigation.