Third Party Security Risk Analyst

Conduct security risk assessments for various third-party vendors including direct, indirect, and logistics suppliers.

Support development and continuous improvement of third-party security risk management policies, procedures, and compliance monitoring.

Collaborate cross-functionally with procurement, legal, audit, and business teams to mitigate third-party risks and support contract risk assessments.

Bachelor's degree in Information Security, Cybersecurity, Risk Management, IT, or related field (or equivalent experience).

Minimum 5 years of experience in cybersecurity risk management, vendor risk, audit, compliance, or related field including support of third-party risk assessments.

Strong knowledge of cybersecurity risk management principles and relevant frameworks such as NIST, ISO/IEC 27001, IEC 62443.

Work Experience Required: Minimum 5 years in relevant field.

Experienced in managing continuous third-party security risk assessments in globalized environments with complex vendor ecosystems.

Skilled in using vendor risk management platforms and tools (e.g., UpGuard, ServiceNow, Aravo, Archer) and developing risk reports and dashboards.

Familiar with regulatory compliance, vendor contract risk clauses, and embedded component principles in operational technology (OT) environments.