The company is seeking to solve the problem of Third-Party Risk Management by hiring a Junior Data Analyst to contribute to the efforts while developing their skills.
Requirements
- Familiarity with Information Security principles and frameworks such as PCI DSS and NIST CSF.
- Certifications such as CISSP, Security+, Network+, or SSCP are a plus.
- Experience in TPRM risk categories including Business Resiliency and Compliance.
- Familiarity with Archer GRC tool and its applications in risk management.
Responsibilities
- Conduct comprehensive risk assessments of Goods Not For Resale (GNFR) vendors to evaluate their risk profiles.
- Document findings related to vendor performance and communicate effectively with stakeholders.
- Leverage internal and external expertise to support assessments and address identified gaps.
Other
- Minimum of 2 years of experience in risk assessments or audits.
- Strong interpersonal and communication skills, capable of building productive working relationships.
- Ability to thrive in a fast-paced, team-oriented environment.
- A proactive approach with a startup mentality to provide security recommendations aligned with business goals.
- Degree requirements not specified, but a certain level of experience is required