Strategic Third-Party Cyber Risk Analyst

Kforce Inc; North Palm Beach (FL); On-site; USD 85,000 - 125,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid time off

HSA

FSA

Job summary

Kforce Inc. is seeking a Vendor Risk Analyst in Florida to conduct cybersecurity risk assessments of third-party vendors and perform security reviews throughout the vendor lifecycle.

You will review questionnaires, policies, and audits, evaluate controls against NIST/ISO 27001/SOC 2, and identify remediation needs. You will collaborate with Procurement, Legal, IT, and business teams, communicate risks to stakeholders, and present findings to leadership.

Qualifications

• Bachelor's degree in a related field.
• 3-5 years in Third-Party Risk Management or related security areas.
• Hands-on experience conducting third-party/vendor security assessments.
• Experience reviewing security questionnaires, controls, and audit findings.
• Strong knowledge of NIST, ISO 27001, and SOC 2.
• Familiarity with GRC or security-rating platforms such as BitSight.
• Excellent written and verbal communication with management.

Responsibilities

• Conduct cybersecurity risk assessments of third-party vendors across the lifecycle.
• Perform standard and expedited vendor security reviews.
• Review security questionnaires, policies, certifications, audits, and supporting docs.
• Evaluate vendor controls against frameworks and requirements.
• Identify gaps, determine risk levels, and provide remediation guidance.
• Maintain assessment documentation including findings and mitigations.
• Ensure assessments align with standards and regulatory requirements.
• Partner with Procurement, Legal, IT, and business teams to address risks.
• Communicate risks and recommendations to stakeholders.
• Present findings to management and steering committees.
• Manage multiple vendor assessments and priorities.

Skills

Vendor risk assessments

GRC platforms

BitSight

Analytical skills

Project management

Communication skills

Security questionnaires

Education

Bachelor's degree in Cybersecurity, Information Security, Computer Science, Business Administration, or related field

Tools

NIST

ISO 27001

SOC 2

Job description

Kforce Inc. is seeking a Vendor Risk Analyst in Florida to conduct cybersecurity risk assessments of third-party vendors and perform security reviews throughout the vendor lifecycle.

You will review questionnaires, policies, and audits, evaluate controls against NIST/ISO 27001/SOC 2, and identify remediation needs. You will collaborate with Procurement, Legal, IT, and business teams, communicate risks to stakeholders, and present findings to leadership.