InfoSec GRC & Vendor Risk Analyst – Hybrid

Rice Park Capital Managment LP; Minneapolis (MN); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical, Dental, Vision Insurance

PTO & Paid Holidays

Company Paid Life Insurance

Long-Term Disability

401(k) with employer match

Job summary

Rice Park Capital Managment LP is seeking an Information Security Analyst to own the GRC program, coordinating with an MSSP for ongoing security operations. You will drive policy governance, risk assessments, and regulatory compliance (SOC 2, GLBA) across the organization.

Responsibilities include managing the MSSP, performing internal risk assessments, and supporting due diligence with investors and lenders.

Qualifications

• Bachelor’s degree in Information Technology, Risk Management, Business, Cybersecurity, or related field
• 2+ years of information security governance, risk, or compliance (GRC) experience
• Working knowledge of SOC 2, ISO 27001, NIST CSF, and GLBA
• Experience with risk assessments, audits, access reviews, and vendor due diligence
• Strong policy writing, documentation, and project management skills
• Familiarity with SIEM outputs (MSSP handles operations)
• Strong organizational and communication skills; vendor management
• Nice-to-have: SQL/Python for reporting
• Nice-to-have: CISA/CRISC or similar certification

Responsibilities

• Own and mature the information security GRC program, including policy governance and risk assessments
• Manage the MSSP relationship; ensure SLAs and coverage gaps are addressed
• Lead SOC 2, GLBA compliance efforts; collect evidence and remediate gaps
• Conduct internal/external risk assessments, audits, and maintain risk register
• Develop and execute BIA, business continuity planning, and risk management activities
• Manage investor/lender/security due diligence requests and questionnaires
• Oversee user access reviews outside MSSP scope; design cadence and controls
• Lead security awareness initiatives and vendor coordination

Skills

GRC experience

Vendor management

Policy writing

SOC 2 knowledge

Risk assessments

Communication

SQL/Python scripting

CISA/CRISC cert

Education

Bachelor’s degree in IT/Risk/Cybersecurity

Tools

SIEM

Job description

Rice Park Capital Managment LP is seeking an Information Security Analyst to own the GRC program, coordinating with an MSSP for ongoing security operations. You will drive policy governance, risk assessments, and regulatory compliance (SOC 2, GLBA) across the organization.

Responsibilities include managing the MSSP, performing internal risk assessments, and supporting due diligence with investors and lenders.