Cyber Security Analyst

Motion Recruitment; Columbus (OH); On-site; USD 95,000 - 115,000; Full time

Job summary

Motion Recruitment is assisting a client in the energy and utility sector in Columbus, OH by recruiting a Cyber Risk Analyst for a 1-year W2 contract with benefits. You will develop and execute enterprise cyber assessments and the Third-Party Risk Management program to minimize supply chain exposure.

Collaborating with IT, Supply Chain, and Compliance, you will evaluate supplier risk, drive Archer GRC adoption, review SOC 2 reports, and report risk metrics to senior leadership.

Qualifications

• 6+ years dedicated TPRM experience in cyber risk.
• 6+ years evaluating Vendor Control Assessments and SOC 2 reports.
• Experience using Archer RSA GRC or equivalent.
• Strong knowledge of NIST CSF and NERC CIP.
• Experience in energy, gas, or electric utilities preferred.

Responsibilities

• Execute end-to-end Third-Party Risk Management (TPRM) and Vendor Control Assessments, evaluating inherent risks and continuous risk profiles across critical suppliers.
• Manage and advance the adoption of the enterprise Archer GRC platform to maintain, track, and report on policy compliance, risk posture, and audit resolution.
• Partner cross-functionally with Supply Chain, IT, OT, and Cyber Compliance teams to embed cyber assessments directly into vendor onboarding and contract renewal processes.
• Review and evaluate third-party SOC 2 reports, third-party control assessments, and security documentation to identify security gaps and track exceptions.
• Develop and maintain operational metrics, dashboards, and reporting to communicate continuous monitoring results and risk profiles effectively to leadership.

Skills

TPRM experience

Vendor risk assessments

Stakeholder communication

Cross-functional collaboration

Risk remediation planning

Tools

Archer RSA GRC

Job description

Our client, a leader in the energy and utility sector, is seeking a Cyber Risk Analyst to join its Enterprise Security & Third-Party Risk Management team in Columbus, OH!

**This is a 1-year W2 contract with benefits (contract-to-hire)**

This role is responsible for developing, maintaining, and executing the enterprise Cyber Assessments and Third-Party Risk Management (TPRM) program to minimize supply chain exposure. Partnering cross-functionally across IT, Supply Chain, and Compliance teams, you will evaluate supplier risk profiles and drive the adoption of enterprise GRC platforms.

Responsibilities:

• Execute end-to-end Third-Party Risk Management (TPRM) and Vendor Control Assessments, evaluating inherent risks and continuous risk profiles across critical suppliers.
• Manage and advance the adoption of the enterprise Archer GRC platform to maintain, track, and report on policy compliance, risk posture, and audit resolution.
• Partner cross-functionally with Supply Chain, IT, OT, and Cyber Compliance teams to embed cyber assessments directly into vendor onboarding and contract renewal processes.
• Review and evaluate third-party SOC 2 reports, third-party control assessments, and security documentation to identify security gaps and track exceptions.
• Develop and maintain operational metrics, dashboards, and reporting to communicate continuous monitoring results and risk profiles effectively to leadership.

Required Qualifications:

• 6+ years of dedicated TPRM experience supporting cyber risk assessments, supplier evaluations, and vendor management programs.
• 6+ years of hands-on experience evaluating Vendor Control Assessments, SOC 2 reports, and risk remediation plans.
• Demonstrated expertise utilizing Archer RSA GRC (or equivalent enterprise GRC tools) for risk management, workflow tracking, and compliance reporting.
• Strong working knowledge of cybersecurity frameworks, particularly NIST 800 CSF, along with awareness of industry-specific compliance standards (e.g., NERC CIP).
• Strong cross-functional communication and stakeholder management skills, with prior experience in the energy, gas, or electric utility industry considered a strong plus.

Motion Recruitment Partners is an Equal Opportunity Employer, including disability/vets. All applicants must be currently authorized to work on a full-time basis in the country for which they are applying, and no sponsorship is currently available. Employment is subject to the successful completion of a pre-employment screening. Accommodation will be provided in all parts of the hiring process as required under Motion Recruitment Employment Accommodation policy. Applicants need to make their needs known in advance.