Vendor Security Analyst (Cybersecurity)

Location: Louisville GBC, United States

Salary: $120,500–$146,200 per year in Washington, D.C.; additional discretionary bonuses may be available.

Company

hirify.global is a global law firm advising clients on finance, business, and regulation, with more than 3,100 lawyers worldwide.

What you will do

• Evaluate third-party risk and guide vendor relationships.
• Review vendor responses to security questionnaires and recommend risk mitigation measures.
• Maintain the vendor risk repository, including certifications and assessment artifacts.
• Assign risk scores to suppliers and partners.
• Conduct onsite security and controls audits of high-risk vendors.
• Support emerging information risk priorities and Responsible Business initiatives.

Requirements

• Demonstrated experience identifying, assessing, and ranking information security risks, including risks related to cloud services.
• Understanding of systems, networks, and security architecture best practices.
• Broad knowledge of risk management, vulnerability management, and third-party risk.
• Ability to make independent decisions and explain technical concepts in clear, non-technical language.
• Ability to analyze security documentation accurately and interact effectively with external vendors.
• Experience with SIG questionnaires, penetration tests, vulnerability tests, SOC 1 and SOC 2 Type 2 reports, and ISO 27001 is preferred; a bachelor's degree is preferred.

Culture & Benefits

• Standard 37.5-hour workweek with core hours generally Monday through Friday, 9:00 a.m. to 5:30 p.m.
• Additional or adjusted hours may be required based on business needs.
• Benefits include medical, dental, and vision insurance.
• 401(k) retirement plan and paid time off are provided, subject to applicable plan terms.
• Equal opportunity employer with reasonable accommodation support for applicants and candidates with disabilities.