Risk Analyst - Vendor Risk Assessment (VRA)

Conduct vendor assessments by reviewing questionnaire responses, evaluating SOC 2 reports, and examining supporting technical documentation. Map vendor technical controls to various security frameworks and support closure efforts with vendors. Communicate findings clearly to both technical teams and non-technical stakeholders.

3 to 5 years of experience in information security or IT risk management. Bachelor's degree in Computer Science, Information Technology, or a related field. Working knowledge of ISO 27001, SOC 2, NIST CSF, and GDPR.

Comprehensive benefits designed to support you and your family, including equity and rewards such as Restricted Stock Units (RSUs) and an Employee Stock Purchase Plan (ESPP).