Strategic Vendor Risk & Security Analyst

Hogan Lovells Cadwalader; Louisville (KY); On-site; USD 121,000 - 146,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) retirement plan

Paid time off

Job summary

Hogan Lovells Cadwalader is seeking a Vendor Security Analyst to evaluate third party risk and conduct technical security reviews of our suppliers and partners. The role reports to the Head of Information Risk and requires coordinating with internal teams to manage vendor risk across engagements.

The position involves reviewing risk assessments, maintaining artifacts, and contributing to firm-wide responsible business initiatives.

Qualifications

• Information security risk identification, assessment, and ranking experience.
• Familiarity with risk assessment documents such as SIG questionnaires.
• Knowledge of SOC 1/2, ISO 27001 standards.
• Bachelor's degree preferred.

Responsibilities

• Evaluate third party risk and steer vendor relationships.
• Evaluate vendor responses to security questionnaires.
• Make recommendations on mitigating vendor risk.
• Maintain vendor risk repository and assign risk scores.
• Conduct onsite audits of high risk vendors.
• Support the firm's Responsible Business initiatives.

Skills

Risk identification

Risk assessment

Communication

Vendor interaction

Detail-oriented

Security architecture

Education

Bachelor's degree

Tools

SOC 1/2 Type 2

ISO 27001

Job description

Hogan Lovells Cadwalader is seeking a Vendor Security Analyst to evaluate third party risk and conduct technical security reviews of our suppliers and partners. The role reports to the Head of Information Risk and requires coordinating with internal teams to manage vendor risk across engagements.

The position involves reviewing risk assessments, maintaining artifacts, and contributing to firm-wide responsible business initiatives.