Cyber Risk & Vendor Security Analyst

Creative Artists Agency; Nashville (TN); Hybrid; USD 87,000 - 104,000; Full time

Job summary

Creative Artists Agency is seeking a Cybersecurity Risk Analyst to strengthen our enterprise security program in Nashville. The role emphasizes risk reviews, vendor assessments, and integration of security controls across cloud and on‑premise environments.

You will partner with IT and business teams to optimize risk exposure, review security postures, and deliver metrics that drive security improvements while supporting enterprise objectives.

Qualifications

• 3–4 years in Information Technology.
• 2+ years in cybersecurity risk management.
• Bachelor’s or Master’s in a relevant field.
• Strong analytical skills to identify vendor risks and priorities.
• Familiarity with NIST, ISO27001, data privacy regulations (GDPR, CCPA), and security attestations (SOC, ISO, PCI DSS, FedRAMP).
• Experience coordinating technical integrations for security tooling and processes.
• Ability to review complex systems architectures to identify security integration opportunities.
• Produce comprehensive written security assessments of vendors' posture.

Responsibilities

• Support Technology Vendor Management program and risk reviews.
• Participate in IT control framework risk reviews (NIST CSF, CIS, ITIL, ISO 27001).
• Conduct vendor, product, and applications security assessments with system owners.
• Partner with business groups to improve security in workflows.
• Coordinate core security integrations (SSO, logs, secrets, alerting, threat modeling, backup) with in‑house and SaaS apps.
• Ensure identified security controls are implemented securely.
• Deliver security metrics to IRM leadership showing control effectiveness.

Skills

Cybersecurity risk

Vendor risk assessment

NIST/ISO frameworks

Cloud (Azure/AWS)

SIEM (Splunk)

Risk analytics

IT security governance

Education

Bachelor's or Master's in a relevant field

Tools

Splunk

OneTrust/SIG/GRC

Azure AD / AWS IAM

JIRA

Office 365

Job description

Creative Artists Agency is seeking a Cybersecurity Risk Analyst to strengthen our enterprise security program in Nashville. The role emphasizes risk reviews, vendor assessments, and integration of security controls across cloud and on‑premise environments.

You will partner with IT and business teams to optimize risk exposure, review security postures, and deliver metrics that drive security improvements while supporting enterprise objectives.