IT Business Systems Analyst

Hydrogen Group; Juno Beach (FL); On-site; USD 47,000 - 54,000; Full time

Job summary

Hydrogen Group seeks an IT Business Systems Analyst to support its third‑party cybersecurity risk program. You will assess vendor security posture across the full vendor lifecycle, assign risk ratings, and present recommendations to executives and stakeholders.

Based in Juno Beach, FL, this 5-6 month contract offers a competitive hourly rate of $34‑$39. Key responsibilities include conducting vendor risk assessments, managing security questionnaires, and collaborating with business units,

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or related field.
• 3-5 years of experience in cybersecurity risk management or third‑party risk assessment.
• Certifications: CISA; CTPRA (preferred).

Responsibilities

• Analyze vendor security documentation, certifications, and compliance frameworks.
• Manage vendor security questionnaires and the documentation review process.
• Ensure vendor assessments comply with industry standards and regulatory requirements.
• Maintain comprehensive documentation of risk assessments and mitigation strategies.
• Use risk assessment tools and platforms to support vendor evaluations and ongoing monitoring.
• Prepare executive‑level reporting on vendor risk findings.

Skills

Analytical thinking

Written & verbal communication

Project management

Education

Bachelor’s degree in Information Security / CS / Business Administration

Certifications: CISA

Certifications: CTPRA

Tools

GRC platforms

BitSight

Dun & Bradstreet

Job description

IT Business Systems Analyst

Location: Juno Beach, FL

Duration: 5-6 Month Contract

Pay Range: $34-39/hr

Our client, a leading energy and utilities organization, is seeking an IT Business Systems Analyst to support its third‑party cybersecurity risk program. In this role, you will assess the security posture of vendors across the full vendor lifecycle, covering both standard and expedited reviews. You will analyze vendor security documentation, assign risk ratings, and give clear recommendations to business, procurement, legal, and IT stakeholders. This is a strong fit for someone with a background in third‑party risk or cybersecurity who communicates well with senior leadership.

In this role, you will manage and support a variety of projects within the IT Cybersecurity and Third‑Party Risk Management department. Key responsibilities include:

• Conduct cybersecurity risk assessments of third‑party vendors throughout the vendor lifecycle
• Perform vendor security assessments for standard and expedited review processes
• Provide risk ratings, requirements, and recommendations for vendor engagements
• Partner with business units, procurement, legal, and IT teams on vendor risk matters
• Present risk findings and recommendations to management and steering committees
• Serve as a subject matter expert on third‑party cybersecurity risks

Essential Job Duties and Job Functions

• Analyze vendor security documentation, certifications, and compliance frameworks
• Manage vendor security questionnaires and the documentation review process
• Ensure vendor assessments comply with industry standards and regulatory requirements
• Maintain comprehensive documentation of risk assessments and mitigation strategies
• Use risk assessment tools and platforms to support vendor evaluations and ongoing monitoring
• Prepare executive‑level reporting on vendor risk findings

Knowledge and Skills

• Strong understanding of cybersecurity frameworks (NIST, ISO 27001, SOC 2)
• Experience with risk assessment tools and platforms (GRC, BitSight, Dun & Bradstreet, etc.)
• Excellent analytical and critical thinking skills
• Strong written and verbal communication abilities
• Project management and organizational skills
• Attention to detail and ability to work under pressure
• Professional communication style suited to executive‑level reporting

Education and Experience

• Bachelor’s degree in Information Security, Computer Science, Business Administration, or a related field (preferred)
• 3-5 years of experience in cybersecurity risk management or third‑party risk assessment (preferred)
• Certifications (preferred): CISA (Certified Information Systems Auditor); CTPRA (Certified Third-Party Risk Assessor)