Cyber Security Analyst

Motion Recruitment; Merrillville (IN); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Benefits included

Job summary

Motion Recruitment Partners is seeking a Cyber Risk Analyst in Merrillville, IN to lead enterprise cyber assessments and TPRM programs. You willPartner with IT, Supply Chain, and Compliance to evaluate supplier risk profiles and drive enterprise GRC adoption, embedding risk processes into onboarding and contract renewals.

The role requires extensive TPRM experience, SOC 2 familiarity, and proficiency with Archer RSA GRC, with a focus on NIST CSF and energy-sector standards.

Qualifications

• 6+ years of dedicated TPRM experience supporting cyber risk assessments.
• 6+ years evaluating Vendor Control Assessments and SOC 2 reports.
• Experience with Archer RSA GRC or equivalent enterprise GRC tools.
• Knowledge of NIST 800 CSF and industry standards (NERC CIP).
• Experience in energy, gas, or electric utility industry is a plus.

Responsibilities

• Execute end-to-end Third-Party Risk Management (TPRM) and Vendor Control Assessments across critical suppliers.
• Manage and advance the adoption of the Archer GRC platform for policy compliance and risk reporting.
• Partner with Supply Chain, IT, OT, and Cyber Compliance to embed cyber assessments in onboarding and renewals.
• Review SOC 2 reports and third-party security documentation to identify gaps and track exceptions.
• Develop and maintain metrics, dashboards, and reporting to communicate risk to leadership.

Skills

TPRM experience

Vendor risk assessments

SOC 2 familiarity

Archer RSA GRC

NIST CSF knowledge

Energy/utility industry experience

Cross-functional collaboration

Tools

Archer RSA GRC

Job description

Our client, a leader in the energy and utility sector, is seeking a Cyber Risk Analyst to join its Enterprise Security & Third-Party Risk Management team in Merrillville, IN!

**This is a 1-year W2 contract with benefits (contract-to-hire)**

This role is responsible for developing, maintaining, and executing the enterprise Cyber Assessments and Third-Party Risk Management (TPRM) program to minimize supply chain exposure. Partnering cross-functionally across IT, Supply Chain, and Compliance teams, you will evaluate supplier risk profiles and drive the adoption of enterprise GRC platforms.

Responsibilities:

• Execute end-to-end Third-Party Risk Management (TPRM) and Vendor Control Assessments, evaluating inherent risks and continuous risk profiles across critical suppliers.
• Manage and advance the adoption of the enterprise Archer GRC platform to maintain, track, and report on policy compliance, risk posture, and audit resolution.
• Partner cross-functionally with Supply Chain, IT, OT, and Cyber Compliance teams to embed cyber assessments directly into vendor onboarding and contract renewal processes.
• Review and evaluate third-party SOC 2 reports, third-party control assessments, and security documentation to identify security gaps and track exceptions.
• Develop and maintain operational metrics, dashboards, and reporting to communicate continuous monitoring results and risk profiles effectively to leadership.

Required Qualifications:

• 6+ years of dedicated TPRM experience supporting cyber risk assessments, supplier evaluations, and vendor management programs.
• 6+ years of hands-on experience evaluating Vendor Control Assessments, SOC 2 reports, and risk remediation plans.
• Demonstrated expertise utilizing Archer RSA GRC (or equivalent enterprise GRC tools) for risk management, workflow tracking, and compliance reporting.
• Strong working knowledge of cybersecurity frameworks, particularly NIST 800 CSF, along with awareness of industry-specific compliance standards (e.g., NERC CIP).
• Strong cross-functional communication and stakeholder management skills, with prior experience in the energy, gas, or electric utility industry considered a strong plus.

Motion Recruitment Partners is an Equal Opportunity Employer, including disability/vets. All applicants must be currently authorized to work on a full-time basis in the country for which they are applying, and no sponsorship is currently available. Employment is subject to the successful completion of a pre-employment screening. Accommodation will be provided in all parts of the hiring process as required under Motion Recruitment Employment Accommodation policy. Applicants need to make their needs known in advance.