Remote Third-Party Risk Analyst

Dickerson Group; Deerfield (IL); Hybrid; USD 87,000 - 110,000; Full time

Benefits offered by this job

Medical, dental, and vision

Life and disability coverage

401(k)

Paid time off

Professional development

Job summary

Alera Group is seeking a Risk Analyst to perform third-party security and compliance risk assessments, review SOC reports, and coordinate user access reviews. The role collaborates with Information Security, Technology, Legal, and Procurement to drive risk-based decisions and support audits.

The position offers remote work with preference for certain time zones and a comprehensive benefits package in a national organization.

Qualifications

• 5+ years of experience in cybersecurity risk, IT risk, information security, governance, risk and compliance (GRC), third-party risk, IT audit, or related field.
• Hands-on experience performing third-party or vendor security risk assessments.
• Experience coordinating or performing user access reviews, access certifications, or identity governance activities.
• Familiarity with frameworks such as NIST CSF, SOC 2, CIS Controls, HIPAA, or similar standards.
• Strong analytical and communication skills to translate risk into actionable decisions.

Responsibilities

• Perform third-party security and compliance risk assessments for new and existing vendors.
• Review SOC reports, security questionnaires, audit documentation, and certifications for control gaps.
• Coordinate and execute user access reviews and remediation.
• Document risks, findings, and remediation plans in governance platforms.
• Partner with stakeholders to identify requirements and drive risk-based decisions.
• Support audits and regulatory examinations with evidence collection.
• Develop risk metrics, reporting, and dashboards to measure program effectiveness.

Job description

Alera Group is seeking a Risk Analyst to perform third-party security and compliance risk assessments, review SOC reports, and coordinate user access reviews. The role collaborates with Information Security, Technology, Legal, and Procurement to drive risk-based decisions and support audits.

The position offers remote work with preference for certain time zones and a comprehensive benefits package in a national organization.