Senior Vendor Cybersecurity GRC Analyst

Jobtailor; Indianapolis (IN); On-site; USD 95,000 - 130,000; Full time

Job summary

Jobtailor seeks a cybersecurity risk professional to independently assess, document, and monitor risks with third-party vendors while evaluating security controls and coordinating validations. This role leads risk assessments and due diligence, develops testing plans, and reports data security incidents.

You will provide technical support in risk assessments, implement security procedures, and work with regulated industries such as healthcare, leveraging frameworks like NIST CSF and ISO 27001

Qualifications

• Requires a bachelor’s degree or equivalent
• Minimum 3 years experience in security operations/design related roles
• Experience providing top-tier information security support across access control, app security, risk, and compliance
• Certifications such as Systems Security Certified Practitioner preferred
• Familiarity with NIST CSF, SOC 2, ISO 27001 and related frameworks
• Knowledge of ServiceNow GRC/IRM workflows
• Experience performing assessments in healthcare or regulated industries

Responsibilities

• Independently assess, document, and monitor cybersecurity risks with third-party vendors
• Evaluate vendor security controls and review assurance evidence
• Communicate with vendors for validations and risk mitigation activities
• Lead cybersecurity risk assessments and due diligence reviews
• Develop testing plans and coordinate reporting of data security incidents
• Provide technical support in risk assessments and implementing security procedures

Skills

Cybersecurity Risk Assessment

Vendor Security Controls Evaluation

Access Management

Network Security

Application Security

Risk Management

Compliance

Operations Security

Security Architecture

Cryptography

Business Continuity

Education

Bachelor's degree or equivalent

Tools

ServiceNow GRC/IRM

Job description

Jobtailor seeks a cybersecurity risk professional to independently assess, document, and monitor risks with third-party vendors while evaluating security controls and coordinating validations. This role leads risk assessments and due diligence, develops testing plans, and reports data security incidents.

You will provide technical support in risk assessments, implement security procedures, and work with regulated industries such as healthcare, leveraging frameworks like NIST CSF and ISO 27001