TPRM Analyst (Cybersecurity)

Location: Remote within the United States

Salary: $75–$90 per hour

Company

EVOCS is an IT consulting firm that delivers technology solutions, advisory expertise, and practical services to help organizations improve performance and achieve business objectives.

What you will do

• Conduct high-volume vendor security assessments and third-party reviews.
• Issue questionnaires, manage evidence requests, and validate submitted materials.
• Review policies, SOC 2 reports, ISO 27001 certificates, penetration test summaries, and other control evidence.
• Identify gaps, assign risk ratings, and document findings clearly.
• Build and track remediation plans through closure with vendors and internal stakeholders.
• Maintain assessment schedules, audit-ready documentation, risk-register accuracy, and status reporting.

Requirements

• 5+ years of experience in cybersecurity, audit, compliance, risk, or vendor management, including at least 3 years conducting vendor security assessments or third-party reviews.
• Hands-on experience with security questionnaires, evidence requests, control reviews, remediation plans, and risk registers.
• Strong written documentation, risk communication, data quality, and attention to consistency.
• Ability to manage concurrent reviews, follow up independently, and drive remediation items to closure.
• Working familiarity with NIST CSF, NIST 800-53, ISO 27001/27002, or CIS frameworks.
• Strong communication skills for working with vendors, procurement, legal, and internal stakeholders.

Nice to have

• Security+, CTPRP, CISA, CRISC, CISM, or ISO 27001 Lead Auditor certification.
• Experience with ProcessUnity, ServiceNow GRC, or Archer.
• Experience with SecurityScorecard, BitSight, RiskRecon, or Black Kite.
• Experience assessing cloud providers, MSPs, or technology vendors.
• Experience managing assessment queues against SLAs in regulated environments.

Culture & Benefits

• Remote work within the United States.
• Customer-centric approach focused on trust and mutual success.
• Emphasis on innovation, quality, integrity, transparency, and data-driven decision making.
• Posting remains active until the position is filled, with extensions in three-day increments.