Vendor Cybersecurity Risk Analyst (3rd-Party) - 6-Month Contract

Hydrogen Group; Florida; Sur place; USD 47 000 - 54 000; Plein temps

Résumé du poste

Hydrogen Group is seeking an IT Business Systems Analyst in Juno Beach, FL for a 5-6 month contract. The role focuses on supporting a third-party cybersecurity risk program, assessing vendor security posture, and delivering clear recommendations to senior stakeholders.

Strong communication with executives is essential. Responsibilities include risk assessments across vendor lifecycles, standard and expedited reviews, and producing executive-level risk reporting.

Qualifications

• Bachelor's degree in information security or related field preferred.
• 3-5 years in cybersecurity risk management or third-party risk assessment preferred.
• Certifications such as CISA or CTPRA preferred.

Responsabilités

• Conduct cybersecurity risk assessments of third-party vendors throughout the vendor lifecycle.
• Perform vendor security assessments for standard and expedited review processes.
• Provide risk ratings, requirements, and recommendations for vendor engagements.
• Partner with business units, procurement, legal, and IT teams on vendor risk matters.
• Present risk findings and recommendations to management and steering committees.
• Serve as a subject matter expert on third-party cybersecurity risks.

Connaissances

Cybersecurity frameworks

Risk assessment tools

Executive reporting

Written communication

Project management

Attention to detail

Stakeholder communication

Formation

BSc Information Security

Outils

GRC platforms

BitSight

Vendor risk tools

Description du poste

Hydrogen Group is seeking an IT Business Systems Analyst in Juno Beach, FL for a 5-6 month contract. The role focuses on supporting a third-party cybersecurity risk program, assessing vendor security posture, and delivering clear recommendations to senior stakeholders.

Strong communication with executives is essential. Responsibilities include risk assessments across vendor lifecycles, standard and expedited reviews, and producing executive-level risk reporting.