Vendor Risk & AI Governance Analyst

Benefit Plans Administrative Services, Inc.; City of Syracuse (NY); On-site; USD 29,000 - 48,000; Full time

Benefits offered by this job

11 paid holidays

Medical, Vision & Dental insurance

401K with generous match

Pension

Tuition Reimbursement

Job summary

Community Financial System, Inc. (CFSI) is seeking an information security professional to support third-party risk management and AI governance initiatives within our Upstate NY footprint.

The role focuses on administering the vendor due diligence portal, coordinating security questionnaires, reviewing SOC reports, and guiding remediation with stakeholders across business lines. We require a Bachelor’s degree in information security and at least four years of related experience.

Qualifications

• Bachelor’s Degree required in Information Security, Cybersecurity, Information Technology or equivalent experience.
• 4+ years in Information Security, Risk Management or TPRM with focus on Information Security and GRC.
• Experience with AI governance frameworks (e.g., NIST AI RMF) is highly desired.
• Financial industry experience with GLBA/FFIEC/FDIC guidance is preferred but not required.
• Must be 18+.

Responsibilities

• Administer third-party due diligence portal and align content with internal policies.
• Coordinate and track security questionnaires from customers, partners, auditors, and other authorized third parties.
• Gather responses and evidence from stakeholders across business lines.
• Review SOC reports, policies, penetration test summaries to assess security posture.
• Identify and communicate security risks and remediation recommendations.
• Support AI governance related to third-party AI solution evaluations and monitoring.
• Monitor use cases and governance processes for in-house AI/agent solutions.
• Support enhancements to third-party risk processes, standards, reporting, workflows and metrics.
• Support identity and access management governance and related coordination.
• Maintain organized assessment records and documentation.
• Assist audits and internal reviews related to vendor management and governance.
• Perform other information security and governance duties as assigned.

Skills

Information security

Risk management

AI governance

SOC reports

Penetration testing

Education

Bachelor’s Degree in Information Security or related field

Job description

Community Financial System, Inc. (CFSI) is seeking an information security professional to support third-party risk management and AI governance initiatives within our Upstate NY footprint.

The role focuses on administering the vendor due diligence portal, coordinating security questionnaires, reviewing SOC reports, and guiding remediation with stakeholders across business lines. We require a Bachelor’s degree in information security and at least four years of related experience.