Onsite Third-Party Risk Analyst - Juno Beach

Vitaver & Associates, Inc; Juno Beach (FL); On-site; USD 85,000 - 110,000; Full time

Job summary

Vitaver & Associates, Inc. seeks a Third-Party Risk Analyst to conduct cybersecurity risk assessments of vendors onsite at the client’s Juno Beach, FL site. This temporary project lasts 12+ months with potential extensions, and relocation may be required.

Strong experience with frameworks and risk tools is essential. Responsibilities include conducting vendor risk assessments, evaluating certifications, and delivering risk ratings and remediation guidance.

Qualifications

• Availability to work 100% of the time at the Client’s site in Juno Beach, FL.
• Experience with cybersecurity frameworks (NIST, ISO 27001, SOC 2).
• Experience with risk assessment tools and platforms (GRC, BitSight, Dun & Bradstreet).
• 3–5 years of cybersecurity risk management or third-party risk assessment.
• CISA certification.
• CTPRA certification.
• Bachelor's degree related field in Information Security/CS/BA.

Responsibilities

• Conduct comprehensive cybersecurity risk assessments of third-party vendors throughout the vendor lifecycle
• Perform vendor security assessments for standard and expedited review processes
• Analyze vendor security documentation, certifications, and compliance frameworks
• Provide risk ratings, requirements and recommendations for vendor engagements
• Manage vendor security questionnaires and documentation review processes
• Ensure vendor assessments comply with industry standards and regulatory requirements
• Maintain comprehensive documentation of risk assessments and mitigation strategies

Skills

Cybersecurity frameworks

Vendor risk management

Risk assessment

Third-party risk

Education

Bachelor's degree in Information Security

CISA

CTPRA

Tools

GRC tools

BitSight

Dun & Bradstreet

Job description

Vitaver & Associates, Inc. seeks a Third-Party Risk Analyst to conduct cybersecurity risk assessments of vendors onsite at the client’s Juno Beach, FL site. This temporary project lasts 12+ months with potential extensions, and relocation may be required.

Strong experience with frameworks and risk tools is essential. Responsibilities include conducting vendor risk assessments, evaluating certifications, and delivering risk ratings and remediation guidance.