Risk Analyst - Cybersecurity

Gdh Consulting, Inc.; St. Louis (MO); Remoto; USD 94.000 - 101.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health insurance

Dental & Vision

401(k) plan

Wellbeing programs

Paid holidays

Descrizione del lavoro

GDH Consulting, Inc. is seeking a senior, fully remote Third-Party Cyber Risk Assessor to evaluate supplier security controls across pre-contract due diligence and ongoing monitoring.

The role involves on-site and virtual assessments, evidence reviews, and remediation validation, with a focus on financial services and regulated industries. The successful candidate will perform peer reviews, apply NIST/ISO frameworks, and document findings and remediation plans.

Competenze

• 6+ years of experience in third-party cyber risk assessment.
• Experience conducting pre-contract due diligence and ongoing third-party monitoring.
• Ability to review SOC 2, ISO 27001, penetration testing evidence, SIG questionnaires, and CAIQ assessments.
• Experience with on-site and virtual cybersecurity assessments.
• Peer-review and remediation validation experience.
• Knowledge of NIST and ISO cybersecurity frameworks.
• Experience in financial services or regulated enterprises is preferred.

Mansioni

• Review supplier cybersecurity controls, policies, and evidence.
• Conduct on-site and virtual third-party security risk assessments.
• Evaluate SOC 2, ISO 27001, penetration testing, SIG, and CAIQ documentation.
• Perform pre-contract due diligence and ongoing supplier monitoring.
• Peer review assessment work completed by other assessors.
• Validate remediation of identified gaps.
• Apply NIST and ISO risk frameworks.
• Document findings, remediation requirements, and results.
• Support third-party risk management in regulated environments.

Conoscenze

Third-party risk assessment

Vendor risk management

Regulated industries

Peer review

NIST ISO frameworks

Strumenti

OneTrust

ProcessUnity

Archer

Prevalent

Whistic

ServiceNow IRM

Descrizione del lavoro

Role Summary

This senior third-party cyber risk assessment role is responsible for evaluating supplier security controls throughout the pre-contract due diligence and ongoing monitoring lifecycle. The position conducts on-site and virtual assessments, reviews security evidence, and validates remediation of identified control gaps. The role also provides peer review of other assessors' work and applies recognized cybersecurity and risk management frameworks to support supplier oversight. Experience in financial services, regulated industries, consulting, or managed security environments is highly valued.

Responsibilities

• Review supplier cybersecurity controls, policies, and supporting evidence.


• Conduct on-site and virtual third-party security risk assessments.


• Evaluate SOC 2, ISO 27001, penetration testing, SIG, and CAIQ documentation.


• Perform pre-contract cybersecurity due diligence and ongoing supplier monitoring.


• Peer review assessment work completed by other assessors.


• Validate that suppliers have remediated identified security and compliance gaps.


• Apply NIST and ISO cybersecurity and risk management frameworks.


• Document assessment findings, remediation requirements, and validation results.


• Support third-party risk management activities in regulated enterprise environments.


• Travel as needed to conduct on-site supplier assessments.

Qualifications

• 6+ years of experience in third-party cyber risk assessment, vendor risk management, or supplier security assurance.


• Experience conducting pre-contract due diligence and ongoing third-party monitoring.


• Demonstrated ability to review SOC 2, ISO 27001, penetration testing evidence, SIG questionnaires, and CAIQ assessments.


• Experience performing both on-site and virtual cybersecurity assessments.


• Peer review and remediation validation experience.


• Working knowledge of NIST and ISO cybersecurity frameworks.


• Experience within a large financial services or other regulated enterprise, such as a bank, insurer, card issuer, or asset manager, is strongly preferred.


• Consulting experience with a Big Four firm or managed security provider is valued, particularly when embedded with an enterprise team.


• Experience with OneTrust, ProcessUnity, Archer, Prevalent, Whistic, or ServiceNow IRM is preferred.


• CTPRP, CISA, CISSP, CISM, or CRISC certification is preferred, along with relevant education, training, certifications, or equivalent practical experience.

Pay Range

$68.00 - $73.00 Hourly

This is a fully remote role and can be performed from an approved location.

About GDH:

At GDH, we believe in the power of people and the importance of caring. Our culture statement, \"We care about people,\" isn't just a tagline - it's the core of everything we do. GDH is a premier staffing and talent solutions company dedicated to helping businesses find the best talent and assisting job seekers in finding their dream jobs. Who We Are: GDH, founded in 2001, has grown into a leader in providing staffing solutions across various industries. We specialize in IT across several sectors, connecting top talent with leading enterprises. As a Best of Staffing firm recognized for excellence in client, employee, talent, and women's services, we pride ourselves on our commitment to quality and service.

GDH Benefits

• Our health benefits include three medical insurance options with access to KISx Card, Zero Card, and HealthJoy concierge services.


• Other plan offerings include dental, vision, life, disability, supplemental insurance, and pet insurance plans.


• Enjoy additional perks like holiday pay, 401(k) plan, direct deposit, an employee referral program, work-life balance benefits, a Wellbeats membership, a discounted gym membership program, and more!

For more detailed information on benefits, please go to GDH's website under the tab for candidates.

GDH provides equal employment opportunities (EEO) to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, gender, sex (including pregnancy), sexual orientation, gender identity, national origin, age, disability, genetic information, marital status, ancestry, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable federal, state, and local laws. Applicants with disabilities who require an accommodation or assistance in applying and/or for interviewing, please contact our HR Department. Please visit our notice of collection for California applicants.