Senior Technology Risk Analyst: Vendor Security & Risk Lead

Sungrow USA Corporation; United States; On-site; USD 144,000 - 176,000; Full time

Job summary

Sungrow USA Corporation is seeking a Senior Technology Risk Analyst to support the risk management program. The role focuses on vendor security assessments, evidence reviews, and remediation coordination across procurement, legal, IT, engineering, product security, and business stakeholders.

The position emphasizes strengthening cybersecurity posture across SaaS, cloud, OT, and manufacturing partner ecosystems, with responsibilities spanning governance, risk reporting, and audit support.

Qualifications

• Experience in vendor risk management and third-party risk assessments.
• Ability to translate technical findings into practical business risk.
• Experience coordinating with Procurement, Legal, IT, Engineering, Product Security.

Responsibilities

• Execute Sungrow's Third-Party Risk Management lifecycle including onboarding, reassessment, renewals and offboarding.
• Conduct security assessments for software vendors, cloud providers, MSPs and strategic partners; review SOC 2, ISO 27001, pen tests and security policies.
• Monitor vendor security posture across lifecycle; track remediation and renewal of attestations and documentation.
• Maintain audit-ready documentation and support customer security assessments with vendor evidence and reports.
• Collaborate with Procurement and Legal during onboarding and contract renewals; ensure compliance with security requirements.
• Assist in Business Continuity and Disaster Recovery reviews and maintain related BIA documentation.

Job description

Sungrow USA Corporation is seeking a Senior Technology Risk Analyst to support the risk management program. The role focuses on vendor security assessments, evidence reviews, and remediation coordination across procurement, legal, IT, engineering, product security, and business stakeholders.

The position emphasizes strengthening cybersecurity posture across SaaS, cloud, OT, and manufacturing partner ecosystems, with responsibilities spanning governance, risk reporting, and audit support.