Senior Cyber Risk & TPRM Analyst (Hybrid)

Blue Star Partners LLC; Merrillville (IN); Hybrid; USD 63,000 - 72,000; Full time

Job summary

Blue Star Partners LLC is seeking a Senior Cyber Risk Analyst to support a mature Third Party Risk Management program in a large utility environment. You will assess vendor cybersecurity controls, manage risk profiles, and coordinate with multiple teams to drive risk-informed decisions.

Responsibilities include cyber assessments across IT/OT, governance, and governance, risk & compliance platforms like Archer GRC, Fortress, and related tools.

Qualifications

• Bachelor's degree or equivalent in a related field.
• 6+ years of Third Party Risk Management experience across relevant support functions.
• Experience with vendor control assessments, SOC 2 reports, risk reporting, and metrics.
• Strong knowledge of NIST Cybersecurity Framework and GRC processes.
• Proven ability to communicate risk findings to both technical and non‑technical audiences.

Responsibilities

• Perform third‑party cyber risk assessments and vendor control assessments.
• Review SOC 2 reports and other security documentation for deficiencies and risk.
• Maintain and track vendor risk profiles and remediation activities.
• Support Archer GRC and Fortress implementations and data quality.
• Communicate risk findings to stakeholders and support affected processes.

Skills

TPRM

SOC 2

GRC platforms

NIST Frameworks

Vendor Risk Management

Archer GRC

Fortress

Stakeholder management

Risk reporting

Vendor onboarding

Education

Bachelor's degree or equivalent

Tools

Archer GRC

Fortress

ServiceNow

RSA Archer

Job description

Blue Star Partners LLC is seeking a Senior Cyber Risk Analyst to support a mature Third Party Risk Management program in a large utility environment. You will assess vendor cybersecurity controls, manage risk profiles, and coordinate with multiple teams to drive risk-informed decisions.

Responsibilities include cyber assessments across IT/OT, governance, and governance, risk & compliance platforms like Archer GRC, Fortress, and related tools.