Hybrid Senior Cyber Risk & TPRM Analyst

Revel-IT-1; Columbus (OH); Hybrid; USD 90,000 - 140,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Revel IT is seeking a Senior Cyber Risk Analyst to develop, maintain, and execute the Third Party Risk Management (TPRM) program. You will manage risk profiles, coordinate supplier assessments, and generate reports and dashboards for leadership.

The role involves collaboration with Enterprise Security, IT, and Supply Chain teams, adherence to NIST CSF, and a hybrid onsite requirement in Columbus with local travel up to 10%. US citizenship is required.

Qualifications

• Bachelor's Degree or equivalent knowledge
• 6+ years' TPRM experience in varying support functions
• 6+ years of experience with Vendor Control Assessments, SOC2 and metrics
• In-depth experience with TPRM processes, reporting and metrics
• Knowledge of TPRM components, trends, and best practices
• Proficient with MS Office 365 and learning new technical concepts quickly
• Analytical abilities including process analysis and root cause analysis
• Strong collaboration, negotiation, communication, and organizational skills
• Willing to travel up to 10% to business unit or other locations
• Experience with NIST 800 CSF is a plus

Responsibilities

• Collaborate with Director of Enterprise Security GRC and Managers to ensure assessment results are addressed
• Execute or support Cyber Assessments and TPRM processes across IT, OT, Cyber, and Service Providers
• Drive implementation roadmaps for Cyber Assessments, Archer, Fortress Control Assessments
• Produce reports, dashboards, and metrics to inform management and stakeholders
• Ensure adherence to Supply Chain processes within Cyber Assessments programs
• Support audit and issues tracking for Cyber Assessments as needed

Skills

TPRM experience

Vendor control assessments

SOC 2 reports

NIST CSF knowledge

Education

Bachelor's Degree or equivalent

Tools

Archer GRC tool

Fortress Control Assessments

Workday integration

ServiceNow integration

Job description

Revel IT is seeking a Senior Cyber Risk Analyst to develop, maintain, and execute the Third Party Risk Management (TPRM) program. You will manage risk profiles, coordinate supplier assessments, and generate reports and dashboards for leadership.

The role involves collaboration with Enterprise Security, IT, and Supply Chain teams, adherence to NIST CSF, and a hybrid onsite requirement in Columbus with local travel up to 10%. US citizenship is required.