Senior Security Risk Management Analyst

About the role

Our client, a leader in cybersecurity and cloud data management, is looking for a skilled Senior Security Risk Management Analyst to join their team for a 6-month engagement. This project focuses on the assessment and mitigation of risks associated with third-party vendors and service providers, ensuring compliance with security and business resilience standards. This is a high-impact role that requires a self-motivated professional who can lead risk assessments, collaborate cross-functionally, and drive vendor governance processes effectively.

Key Responsibilities & Deliverables

• Conducting comprehensive cybersecurity and regulatory risk assessments for new and existing third-party vendors.
• Evaluating third-party security questionnaires and audit documentation (e.g., SOC 2, ISO 27001).
• Coordinating with vendors to verify security controls and manage remediation plans.
• Classifying vendors by risk tier and maintaining accurate risk profiles.
• Partnering with Procurement, Legal, and InfoSec teams to enhance supplier security management processes and identify automation opportunities.

Required Skills & Experience

• A proven track record of successful contract engagements.
• A Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field.
• An in-depth understanding of information security frameworks and compliance requirements (e.g., ISO 27001/2, FedRAMP, SOC 2, PCI DSS, NIST CSF).
• The ability to synthesize complex risk findings for both technical and non-technical stakeholders.
• A detail-oriented and process-driven mindset, with the ability to manage multiple vendor assessments concurrently.
• Experience with risk assessment tools is a plus.

This role is W2 only (no C2C or 1099 contractors).