Remote Third-Party Risk Analyst

Alera Group, Inc.; Indianapolis (IN); Hybrid; USD 87,000 - 110,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Life and disability coverage

401(k)

Paid time off

Professional development

Job summary

Alera Group is seeking a Risk Analyst to perform third-party security and compliance risk assessments, review SOC reports, coordinate user access reviews, and document risk findings. You will partner with Information Security, Technology, Legal, and Procurement to drive risk-based decisions.

This role is Remote with preference for Central or Eastern Time Zones, and supports a growing national organization. The ideal candidate has 5+ years in cybersecurity risk and hands-on experience with vendor

Qualifications

• 5+ years in cybersecurity risk, IT risk, information security, GRC, third-party risk, IT audit, or related field.
• Hands-on experience performing third-party or vendor security risk assessments.
• Experience coordinating or performing user access reviews, access certifications, or identity governance.

Responsibilities

• Perform third-party security and compliance risk assessments for vendors, evaluating risk exposure, control effectiveness, business impact, and remediation requirements.
• Review SOC reports, security questionnaires, audit documentation, certifications, and other evidence to identify control gaps and potential business impacts.
• Coordinate and execute user access reviews, validating access appropriateness and ensuring remediation of identified issues.
• Document risks, findings, recommendations, and remediation plans in governance, risk, and compliance platforms.
• Serve as a trusted advisor to stakeholders by asking questions, identifying needs, assessing risks, and translating requests into clear risk activities.
• Partner with Information Security, Technology, Legal, Procurement, and business stakeholders to identify requirements and drive risk-based decisions.

Skills

Vendor risk assessments

SOC reports review

Access reviews

GRC frameworks

Audit support

Stakeholder comms

Documentation governance

Job description

Alera Group is seeking a Risk Analyst to perform third-party security and compliance risk assessments, review SOC reports, coordinate user access reviews, and document risk findings. You will partner with Information Security, Technology, Legal, and Procurement to drive risk-based decisions.

This role is Remote with preference for Central or Eastern Time Zones, and supports a growing national organization. The ideal candidate has 5+ years in cybersecurity risk and hands-on experience with vendor