Senior Third-Party Risk Management Analyst (Cybersecurity)

Location: Remote (US Only); candidates must be eligible to work in the United States without sponsorship

Company

hirify.global provides cloud-based software and services for mission-driven nonprofits and associations, supporting fundraising, learning, events, careers, volunteering, accounting, and association management.

What you will do

• Maintain the enterprise-wide inventory of third-party providers, applications, and services from onboarding through termination.
• Lead vendor cybersecurity assessments and evaluate vendor maturity against NIST CSF, CIS, CMMC, GDPR, PCI DSS, SOC 2, and other frameworks.
• Oversee vendor SLAs, RPO/RTO commitments, breach notification requirements, cybersecurity insurance documentation, findings, and remediation plans.
• Support third-party evidence collection and control validation for SOC 2 Type II and PCI DSS assessments.
• Coordinate with the Threat & Vulnerability Management team on client vulnerability notifications, follow-up actions, and risk guidance.
• Partner with Legal, Procurement, Product, Cybersecurity Engineering, GRC, auditors, business owners, and the CISO on risk reduction and resiliency.

Requirements

• 5+ years of experience in cybersecurity, risk management, audit, or compliance.
• Strong knowledge of PCI DSS, SOC 2, GDPR, GLBA, HIPAA, SOX, and HITRUST requirements.
• Experience evaluating legacy and modern cloud technologies, including AWS, GCP, and Azure.
• Knowledge of APIs, application cybersecurity, encryption, endpoint and network security, SIEM, IDS, log management, vulnerability management, and threat intelligence.
• Ability to assess vendor controls, map them to frameworks, and communicate risk to non-technical stakeholders.
• Strong project management, organizational, written, and verbal communication skills.

Nice to have

• Experience supporting SOC 2 Type II and PCI DSS audits.
• Experience with eGRC or ITGRC platforms such as Jira Service Manager GRC, Archer, OneTrust, or LogicGate.
• Certifications such as CISSP, CISM, CISA, CRISC, CTPRA, or CTPRP.

Culture & Benefits

• Medical, dental, and vision benefits.
• 401(k) savings plan with company match.
• Flexible planned paid time off and generous sick leave.
• Employer-paid parental leave and short-term disability coverage.
• Remote work flexibility, work-life balance, and an inclusive, purpose-driven environment.