Senior Cyber Risk & TPRM Analyst (Hybrid)

Blue Star Partners LLC; Columbus (OH); Hybrid; USD 63,000 - 72,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Blue Star Partners LLC seeks a Senior Cyber Risk Analyst to support third‑party risk management within a mature program in a large utility environment. The role focuses on vendor cyber assessments, risk profiling, and cross‑functional collaboration across Cybersecurity, IT, and Supply Chain.

The ideal candidate has hands‑on TPRM experience, SOC 2 reviews, and strong GRC tooling knowledge (Archer, Fortress).

Qualifications

• Bachelor's degree or equivalent in a related field or experience.
• 6+ years of Third Party Risk Management experience across relevant support functions.
• Experience with vendor control assessments, SOC 2 reports, risk reporting, and metrics.
• Strong knowledge of TPRM processes, methodologies, and dashboards.
• Proficiency with GRC tools (Archer) and related platforms; familiarity with Fortress is a plus.

Responsibilities

• Perform third-party cyber risk assessments and review vendor security controls.
• Maintain vendor risk profiles and track findings, exceptions, and remediation activities.
• Coordinate with multiple stakeholders to ensure risk findings are understood and addressed.
• Support governance, risk, and compliance activities using Archer GRC and Fortress.
• Analyze SOC 2 reports and other security documentation to identify deficiencies.
• Produce risk reporting, dashboards, and metrics for leadership.

Skills

TPRM experience

Vendor risk assessments

SOC 2 reviews

Risk reporting

GRC platforms

NIST frameworks

Stakeholder management

Archer GRC

Fortress

Cross-functional collaboration

Education

Bachelor's degree or equivalent

Tools

Archer GRC

Fortress

ServiceNow

RSA Archer

Microsoft Excel

Job description

Blue Star Partners LLC seeks a Senior Cyber Risk Analyst to support third‑party risk management within a mature program in a large utility environment. The role focuses on vendor cyber assessments, risk profiling, and cross‑functional collaboration across Cybersecurity, IT, and Supply Chain.

The ideal candidate has hands‑on TPRM experience, SOC 2 reviews, and strong GRC tooling knowledge (Archer, Fortress).