Remote Senior Vendor Risk & Cybersecurity Analyst

Danaher Corporation; Washington (District of Columbia); Remote; USD 130,000 - 160,000; Full time

Benefits offered by this job

Medical/dental/vision insurance

401(k)

Job summary

Danaher Corporation is seeking a Senior Cybersecurity Risk Analyst for a remote role. You will lead third-party risk assessment across the vendor lifecycle, review security contracts, and apply AI risk frameworks to a global portfolio, collaborating with Legal, Privacy and Procurement.

The role focuses on enterprise risk, vendor risk, and cross-OpCo reporting, enabling strong governance and executive storytelling. Remote work options are available with KPIs aligned to Danaher's standards.

Qualifications

• 7+ years of experience in third-party risk, enterprise risk management, vendor security, or related governance.
• Strong working knowledge of TPRM frameworks (e.g., SIG, NIST SP 800-161, ISO/IEC 27036) and privacy/security regulations.
• Experience administering vendor security questionnaires, reviewing evidence (SOC 2, ISO 27001), and scoring at scale.
• Ability to coordinate redlines in contract documents with Legal, Privacy, and Procurement and communicate findings clearly.

Responsibilities

• Execute the TPRM lifecycle end-to-end, including intake, inherent risk tiering, questionnaire administration, evidence collection and review, scoring, and risk decisioning.
• Review cybersecurity provisions in vendor contracts and land consistent redlines with cross-functional partners.
• Assess supply-chain and geopolitical risk and apply AI vendor risk frameworks to AI-enabled products.
• Bridge gaps between central TPRM and OpCo coordinators, guiding intake, scoring consistency, escalation, and procurement engagement.
• Contribute to enterprise risk register operations and executive-grade reporting for QBRs and CISO updates.

Skills

Third-party risk management

Enterprise risk management

Vendor security

Contract review coordination

Stakeholder communication

Tools

OneTrust

ServiceNow IRM

RSA Archer

Job description

Danaher Corporation is seeking a Senior Cybersecurity Risk Analyst for a remote role. You will lead third-party risk assessment across the vendor lifecycle, review security contracts, and apply AI risk frameworks to a global portfolio, collaborating with Legal, Privacy and Procurement.

The role focuses on enterprise risk, vendor risk, and cross-OpCo reporting, enabling strong governance and executive storytelling. Remote work options are available with KPIs aligned to Danaher's standards.