Third-Party Risk Analyst (Cybersecurity)

TL;DR

Third-Party Risk Analyst (Cybersecurity): Analyzing and assessing technology, privacy, and operational risks of suppliers with an accent on supplier controls and risk mitigation strategies. Focus on evaluating SOC 1/2 reports and documenting risk findings to ensure organizational resiliency.

Location: McLean, Virginia (Onsite)

Salary: $55.00 - $60.00 per hour

Company

A leading provider of information technology and workforce solutions operating across the U.S. and Canada.

What you will do

• Analyze and assess risks related to technology, privacy security, resiliency, and other operational areas.
• Evaluate supplier controls, identifying and documenting risk findings.
• Recommend action plans and remediation strategies to mitigate risk factors.
• Gather and handle confidential financial information and sensitive data appropriately.
• Conduct thorough research using the internet and first-person interviews.
• Communicate escalations to management and adapt to changing priorities in a fast-paced environment.

Requirements

• Must be based in or able to work onsite in McLean, Virginia
• Prior experience as a risk assistant or risk analyst.
• Strong working knowledge of SOC 1 and SOC 2 Type II reports and third-party vendor risk management.
• Excellent written and spoken communication skills.
• Proficiency in MS Office applications and data entry.

Nice to have

• Certifications: CIA, CRISC, CISA, or CISM.
• Background in supply chain, compliance risk management, or audit.
• Knowledge of Process Unity.

Culture & Benefits

• Access to comprehensive medical, dental, and vision insurance.
• 401K contributions for full-time consultants.
• Paid time off (PTO) and sick leave.
• Dynamic, fast-paced work environment with a focus on organizational goals.