Senior Associate Risk Analyst – Third Party

This is a fully remote position, open to applicants in North Carolina, +1 more state.

📋 Description

• Identify, assess, report, and mitigate risks associated with enterprise IT and Cybersecurity.

• Collaborate with business and technology leaders, as well as stakeholders, to develop and implement effective mitigation strategies.

• Support the creation of measures to monitor the effectiveness and progress of risk mitigation efforts.

• Stay updated on information security trends, threats, technologies, regulations, best practices, and AI-related risks.

• Contribute to departmental and enterprise initiatives, change management, team goals, and continuous improvement efforts.

• Execute information security risk management activities and manage assigned projects.

• Identify and communicate recommendations for process improvements.

• Conduct information security risk assessments of third-party vendors through questionnaires, audit reports, control documentation, and supporting evidence.

• Evaluate assessment outcomes to determine the information security risk profiles of third parties.

• Formulate recommendations for addressing security gaps and assist in remediation efforts with both internal and external stakeholders.

• Document assessments, findings, recommendations, and communications within governance, risk, and compliance platforms.

• Address inquiries regarding organizational information security practices.

• Collaborate with business stakeholders and risk functions on assessments, remediation tracking, and risk management initiatives.

• Gather, maintain, and analyze data related to assessments and risk management.

• Create metrics, dashboards, reports, and presentations that detail assessment results, risk trends, remediation progress, and overall program performance.

• Identify trends, reporting opportunities, and areas for improvement in data quality.

• Analyze and synthesize information obtained from security questionnaires, audit reports, evidence, policies, standards, and discussions with stakeholders.

• Present findings and reports to technical, business, and leadership audiences.

• Assist in the formulation of information security standards, policies, procedures, and documentation.

• Evaluate security considerations for third-party AI solutions.

• Investigate emerging technologies, including AI, to enhance team processes, reporting, and analysis capabilities.

⛳️ Requirements

• Bachelor's degree (or equivalent) with 4 years of education.

• 1 to 3+ years of experience in Information Security that is directly relevant to the position.

• Ability to read, analyze, and interpret both internal and external documents, technical procedures, regulations, policies, proposals, and standard operating procedures.

• Excellent written and verbal communication abilities.

• Strong organizational skills with the capability to prioritize tasks and manage multiple responsibilities while maintaining attention to detail.

• Solid project management skills, able to coordinate several projects under time constraints and meet deadlines.

• Strong interpersonal skills with a collaborative approach.

• Capability to exercise sound judgment and discretion concerning confidential information.

• Ability to foster collaboration and influence outcomes without direct authority.

• Proficient in Microsoft Office Suite (Word, Excel, PowerPoint, Outlook).

• Successful completion of regulatory and job training requirements.

• Awareness and understanding of Agile methodologies is preferred.

🏝️ Benefits

• Clearly defined career paths and job levels.

• Opportunities for leadership development and virtual training.

• Paid time off and parental leave.

• Competitive 401K and employee benefits package.

• Free financial counseling, health coaching, and employee assistance programs.

• Tuition assistance program available.

• Flexible work arrangements offered.

• Access to productivity and technology tools along with training.

• Eligibility for the Annual Incentive Program.

• Potential for long-term and sales incentives.