Remote Vendor Security Risk Analyst

The Elite Job; Centerport (NY); On-site; USD 110,000 - 140,000; Full time

Job summary

The Elite Job is seeking a detail-oriented Third-Party Risk Analyst – Vendor Security Assessments to strengthen our vendor risk program. You will evaluate third-party security controls, review questionnaires, and identify gaps, working with security, procurement, legal, and compliance teams to ensure alignment with regulatory requirements and organizational risk tolerance.

You will lead assessments, document findings, and help mature our risk framework through remediation tracking, reporting,

Qualifications

• Bachelor's degree in cybersecurity, information technology, computer science, information systems, risk management or related field preferred.
• Equivalent professional experience or industry certifications may be considered.
• Training in information security governance, risk assessment, privacy, or regulatory compliance is advantageous.

Responsibilities

• Conduct vendor security assessments of third‑party vendors, suppliers, and service providers.
• Review security questionnaires and supporting evidence to determine control effectiveness.
• Identify control gaps and provide remediation recommendations based on risk severity.
• Prepare clear risk assessment reports and dashboards for stakeholders.
• Collaborate with procurement, legal, compliance, security, and business teams to ensure requirements are met.
• Support governance, risk, and compliance activities across programs.

Skills

Vendor risk management

Security questionnaires

Risk assessment

Documentation

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

GRC platforms

Vendor risk software

Microsoft Excel

Office 365

Job description

The Elite Job is seeking a detail-oriented Third-Party Risk Analyst – Vendor Security Assessments to strengthen our vendor risk program. You will evaluate third-party security controls, review questionnaires, and identify gaps, working with security, procurement, legal, and compliance teams to ensure alignment with regulatory requirements and organizational risk tolerance.

You will lead assessments, document findings, and help mature our risk framework through remediation tracking, reporting,