IT Business Systems Analyst

Hydrogen Group; Florida; On-site; USD 47,000 - 54,000; Full time

Job summary

Hydrogen Group is seeking an IT Business Systems Analyst in Juno Beach, FL for a 5-6 month contract. The role focuses on supporting a third-party cybersecurity risk program, assessing vendor security posture, and delivering clear recommendations to senior stakeholders.

Strong communication with executives is essential. Responsibilities include risk assessments across vendor lifecycles, standard and expedited reviews, and producing executive-level risk reporting.

Qualifications

• Bachelor's degree in information security or related field preferred.
• 3-5 years in cybersecurity risk management or third-party risk assessment preferred.
• Certifications such as CISA or CTPRA preferred.

Responsibilities

• Conduct cybersecurity risk assessments of third-party vendors throughout the vendor lifecycle.
• Perform vendor security assessments for standard and expedited review processes.
• Provide risk ratings, requirements, and recommendations for vendor engagements.
• Partner with business units, procurement, legal, and IT teams on vendor risk matters.
• Present risk findings and recommendations to management and steering committees.
• Serve as a subject matter expert on third-party cybersecurity risks.

Skills

Cybersecurity frameworks

Risk assessment tools

Executive reporting

Written communication

Project management

Attention to detail

Stakeholder communication

Education

BSc Information Security

Tools

GRC platforms

BitSight

Vendor risk tools

Job description

IT Business Systems Analyst

Location: Juno Beach, FL

Duration: 5-6 Month Contract

Pay Range: $34-39/hr

Our client, a leading energy and utilities organization, is seeking an IT Business Systems Analyst to support its third-party cybersecurity risk program. In this role, you will assess the security posture of vendors across the full vendor lifecycle, covering both standard and expedited reviews. You will analyze vendor security documentation, assign risk ratings, and give clear recommendations to business, procurement, legal, and IT stakeholders. This is a strong fit for someone with a background in third-party risk or cybersecurity who communicates well with senior leadership.

Job Responsibilities

• Conduct cybersecurity risk assessments of third-party vendors throughout the vendor lifecycle


• Perform vendor security assessments for standard and expedited review processes


• Provide risk ratings, requirements, and recommendations for vendor engagements


• Partner with business units, procurement, legal, and IT teams on vendor risk matters


• Present risk findings and recommendations to management and steering committees


• Serve as a subject matter expert on third-party cybersecurity risks

Essential Job Duties and Job Functions

• Analyze vendor security documentation, certifications, and compliance frameworks


• Manage vendor security questionnaires and the documentation review process


• Ensure vendor assessments comply with industry standards and regulatory requirements


• Maintain comprehensive documentation of risk assessments and mitigation strategies


• Use risk assessment tools and platforms to support vendor evaluations and ongoing monitoring


• Prepare executive-level reporting on vendor risk findings

Knowledge and Skills

• Strong understanding of cybersecurity frameworks (NIST, ISO 27001, SOC 2)


• Experience with risk assessment tools and platforms (GRC, BitSight, Dun & Bradstreet, etc.)


• Excellent analytical and critical thinking skills


• Strong written and verbal communication abilities


• Project management and organizational skills


• Attention to detail and ability to work under pressure


• Professional communication style suited to executive-level reporting

Education and Experience

• Bachelor's degree in Information Security, Computer Science, Business Administration, or a related field (preferred)


• 3-5 years of experience in cybersecurity risk management or third-party risk assessment (preferred)


• Certifications (preferred): CISA (Certified Information Systems Auditor); CTPRA (Certified Third-Party Risk Assessor)