Execute vendor cyber risk assessments using established methodologies, questionnaires, and tools
Review vendor provided documentation, evidence, and responses to identify potential security risks
Evaluate vendor controls across key security domains (e.g., access control, data protection, incident response, business continuity) with guidance
Document assessment results clearly and consistently in the designated GRC platform
Create and maintain accurate vendor risk records within the cyber risk register or vendor risk module
Assist with tracking remediation actions, follow-up questions, and reassessments
Partner with Procurement, Legal, Privacy, and business teams to support vendor onboarding and contract review processes
Support senior team members with data gathering, reporting, and analysis related to third-party cyber risk

Bachelor’s degree or related experience in IT, security, computer science, or related technology discipline (preferred)
1
3 years of IT/Cyber Risk Management experience in a highly regulated industry
General understanding of third-party risk, vendor assessments, or security questionnaires
Excellent analytical and problem-solving skills
Strong communication and interpersonal skills
Familiarity or interest in GRC tools and risk tracking systems
Ability to follow defined processes and meet deadlines
Willingness to pursue related certifications (CRISC, CISM, CISSP, etc.)

Associate Analyst, Cyber Risk Assurance

Key skills