Vendor cyber risk analyst

In this opportunity as Vendor cyber risk analyst, you will:

• Conducting risk assessments of third-party vendors and partners to identify potential security, compliance, and operational risks.
• Reviewing and analyzing third-party contracts, agreements, and security documentation to ensure alignment with TRs risk management policies and standards.
• Developing and implementing risk mitigation strategies and controls to address identified risks and vulnerabilities.
• Monitoring and tracking third-party risk metrics and performance indicators to ensure ongoing compliance and effectiveness of risk management measures.
• Collaborating with cross-functional teams, including Legal, Compliance, IT Security, and Procurement, to address third-party risk issues and concerns.
• Providing guidance and support to internal stakeholders on third-party risk management best practices and procedures.
• Staying informed about emerging trends, threats, and regulatory requirements related to third-party risk management.

• Bachelor s degree in information technology, or related field.
• 5-7 years of experience in risk management, vendor management, or related field.
• Strong understanding of risk management principles, practices, and methodologies.
• Knowledge of relevant regulations, standards, and frameworks (e.g., GDPR, ISO 27001, NIST Cybersecurity Framework).
• Excellent analytical, problem-solving, and decision-making skills.
• Effective communication and interpersonal skills, with the ability to collaborate and influence stakeholders at all levels of the organization.
• Certifications such as Certified Third-Party Risk Professional (CTPRP), Certified Information Systems Auditor (CISA), or Certified Information Security Manager (CISM), ISO 27001 LA are a plus.
• Experience with third-party risk management tools and platforms is desirable.