Hybrid Senior Cyber Risk & TPRM Analyst

Revel IT; Columbus (OH); Hybrid; USD 95,000 - 135,000; Full time

Job summary

Revel IT in Columbus, OH is seeking a Senior Cyber Risk Analyst for a contract-to-hire role to develop, maintain, and execute the Cyber Assessments program (Third Party Risk Management) across vendors and technology teams.

You will lead risk profiling, report on metrics, and collaborate with Enterprise Security, IT, and Supply Chain while leveraging Archer and the GRC platform; hybrid onsite 3 days/week.

US citizenship required; travel up to 10% as needed.

Qualifications

• Bachelor's Degree or equivalent work experience.
• 6+ years' TPRM experience in varying support functions.
• 6+ years of experience with Vendor Control Assessments, SOC2 reports and metrics.
• In-depth experience with TPRM processes, reporting and metrics.
• Knowledge of TPRM components, trends, and best practices.
• Solid skills with MS Office 365 suite and ability to learn new concepts quickly.
• Analytical abilities including process analysis and root-cause analysis.
• Willing to travel up to 10% to business unit or other locations.

Responsibilities

• Develop, maintain, and execute the Cyber Assessments program (TPRM).
• Utilize GRC Platform to coordinate supplier assessments and create reports, dashboards, and metrics.
• Collaborate with Enterprise Security, IT, Supply Chain, Internal Audit and business units.
• Assist in driving roadmaps for Cyber Assessments, Archer, and Fortress Control Assessments.
• Ensure risk results are communicated and mitigated across stakeholders.

Skills

TPRM experience

Vendor Control Assessments

SOC2 reports

NIST 800 CSF

ITIL v4

Analytical skills

Communication

Willing to travel

Education

Bachelor's Degree or equivalent

Tools

Archer GRC

GRC platform

SharePoint

Excel

Job description

Revel IT in Columbus, OH is seeking a Senior Cyber Risk Analyst for a contract-to-hire role to develop, maintain, and execute the Cyber Assessments program (Third Party Risk Management) across vendors and technology teams.

You will lead risk profiling, report on metrics, and collaborate with Enterprise Security, IT, and Supply Chain while leveraging Archer and the GRC platform; hybrid onsite 3 days/week.

US citizenship required; travel up to 10% as needed.