Sr Associate Cybersecurity Risk Analyst - Third Party

About Our Client

The organization operates in the financial services industry, focusing on empowering customers to manage their financial futures. It addresses challenges related to information security and risk management within enterprise environments, aiming to protect data and systems from evolving threats. The program emphasizes collaboration with business and technology leaders to implement effective IT and cyber risk mitigation strategies.

About the Opportunity

The Sr Associate Cybersecurity Risk Analyst - Third Party plays a crucial role in identifying, assessing, and mitigating IT and cyber risks associated with third-party vendors. This position supports enterprise risk management by conducting security assessments, recommending solutions, and tracking remediation efforts. The role ensures that risk mitigation approaches are effective and aligned with organizational policies and industry standards.

Responsibilities

• Maintain knowledge of current and emerging information security trends, threats, regulatory requirements, and AI-related risks.
• Support change management, team objectives, and continuous improvement initiatives.
• Perform information security risk management activities and contribute to assigned projects.
• Identify and recommend process improvements to enhance efficiency and quality.
• Conduct information security risk assessments of third-party vendors using questionnaires, audit reports, and control documentation.
• Evaluate assessment results to determine third-party risk profiles.
• Develop recommendations to address security gaps and collaborate on risk mitigation efforts.
• Document assessment activities, findings, and communications within governance platforms.
• Respond to inquiries about information security practices with accurate and approved information.
• Partner with business stakeholders and risk functions to support risk assessment and remediation tracking.
• Collect, analyze, and maintain data to support program oversight and reporting.
• Assist in preparing metrics, dashboards, and reports for stakeholders and leadership.
• Identify trends and data quality improvements for continuous program enhancement.
• Analyze multiple information sources to develop clear findings and reporting.
• Communicate effectively with technical, business, and leadership audiences.
• Assist in developing and implementing information security policies and documentation.
• Evaluate security considerations for third-party AI solutions.
• Demonstrate a willingness to learn emerging technologies and improve team processes.

Requirements

• Bachelor’s degree or equivalent.
• 1 to 3+ years of information security experience relevant to the role.
• Ability to interpret internal and external documents including regulations and policies.
• Strong written and verbal communication skills.
• Excellent organizational and multitasking abilities with attention to detail.
• Solid project management skills to handle multiple priorities under pressure.
• Strong interpersonal and collaborative skills.
• Discretion and sound judgment with confidential information.
• Ability to influence outcomes through collaboration.
• Proficiency with Microsoft Office Suite.
• Completion of regulatory and job-specific training.
• Awareness or understanding of Agile methodologies preferred.

Note: TalentHop is a recruitment partner of this role.