IT GRC Vendor Risk Analyst

Core Specialty Insurance; Cincinnati (OH); Hybrid; USD 80.000 - 110.000; Vollzeit

Benefits dieser Stelle

Medical, dental, vision insurance

401(k) with company match

Employee wellness program

Education assistance

Zusammenfassung

Core Specialty Insurance seeks an IT GRC - Risk Analyst to help assess, monitor, and manage technology and cybersecurity risks from third parties. You will work with IT, procurement, legal, compliance, and vendors to support risk assessments, evidence collection, and remediation tracking.

The role emphasizes reviewing SOC reports, certifications, and policies, and maintaining organized records for audits and regulatory readiness.

Qualifikationen

• Bachelor’s degree or equivalent work experience in a related field.
• Experience with IT GRC, risk management, or compliance activities.
• Ability to document and communicate risk findings clearly.

Aufgaben

• Support third-party risk assessments and evidence collection.
• Review vendor documentation, SOC reports, and certifications to identify control gaps.
• Maintain risk registers, remediation plans, and governance artifacts.
• Collaborate with IT, legal, procurement, and compliance to manage risk and remediation.
• Prepare clear risk summaries, dashboards, and status updates for management.

Kenntnisse

GRC understanding

Vendor risk assessment

Analytical skills

Documentation

Communication

Problem-solving

Ausbildung

Bachelor’s degree in Information Systems, Cybersecurity, Risk Management, Information Assurance, Business Administration, or related field

Tools

Jira

Confluence

SharePoint

Power BI

Microsoft 365

Jobbeschreibung

Core Specialty Insurance seeks an IT GRC - Risk Analyst to help assess, monitor, and manage technology and cybersecurity risks from third parties. You will work with IT, procurement, legal, compliance, and vendors to support risk assessments, evidence collection, and remediation tracking.

The role emphasizes reviewing SOC reports, certifications, and policies, and maintaining organized records for audits and regulatory readiness.