Third-Party Risk Analyst

To Apply for this Job Click Here

Third Party Risk Analyst
Location: Deerfield Beach, FL (3 days onsite)
Employment Type: Contract
Travel: Approximately 30% domestic travel for third-party site visits

Position Overview: Our client is an $20B, Fortune 200 company in the automotive retailing, distribution and services industry. They are currently ranked in the Top 20 companies to work for in the US by Fortune Magazine, Top 20 best companies for diversity and have an amazing work culture and impressive long-term growth prospects.

We are seeking a self-driven and experienced Third-Party Information Security Risk Analyst to conduct thorough security assessments of third-party vendors and partners. This role requires strong analytical skills, attention to detail, and the ability to collaborate across business units to ensure our vendors meet our organization’s security standards.

Key Responsibilities:

• Conduct on-site or virtual assessments to evaluate the information security posture of key vendors.
• Formally document results of security-related third-party risk assessments.
• Evaluate assessment results and draw logical conclusions about third-party security posture.
• Collaborate with internal stakeholders, business units, and vendors to gather required information for assessments.
• Independently prepare reports summarizing assessment findings and recommendations.
• Track remediation plans and perform follow-up on open items.
• Meet Third-Party Management Service Line Agreements (SLAs) set by the department.
• Manage multiple assessments simultaneously, prioritize effectively, and meet deadlines.
• Negotiate issues and resolve problems collaboratively.
• Present testing findings and recommendations to all levels of management.

• Applies professional judgment and operational knowledge to assess third parties and recommend actions
• Collaborates effectively with clients across all business units and leadership levels.
• Ability to prioritize and work on multiple concurrent assessments.
• Plans tasks and activities effectively, anticipates roadblocks, and adjusts as needed.
• Thrives in ambiguity, manages risk and uncertainty, and adapts to change.

Qualifications:

• Solid experience conducting security-related third-party assessments, preferably with financial institutions.
• Experience completing third-party risk assessments on behalf of an organization.
• Bachelor’s degree in Accounting, Computer Science, Information Technology, or a related field.
• 4+ years of experience in third-party assessments.
• Knowledge of security frameworks and regulations such as NIST Cybersecurity Framework, ISO, PCI-DSS, GLBA (preferred).
• Strong analytical, critical thinking, and professional skepticism skills.
• Strong organizational, adaptability, and verbal/written communication abilities.
• Proficient in Microsoft 365.
• Experience with vendor management systems such as the ProcessUnity Vendor Management module (or equivalent).
• Knowledge of Power Platform or other data analytics/visualization tools (preferred).
• Ability to work both independently and as part of a team.
• Professional demeanor with the ability to work effectively with all levels of management and maintain strict confidentiality.

To Apply for this Job Click Here

Equal Employment Opportunity Statement
Gravity IT Resources is an Equal Opportunity Employer. We are committed to creating an inclusive environment for all employees and applicants. We do not discriminate on the basis of race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, genetic information, veteran status, or any other legally protected characteristic. All employment decisions are based on qualifications, merit, and business needs.