Senior Technology Risk Analyst

Supporting the execution and continuous improvement of the organization's Risk Management program, the full-time Senior Technology Risk Analyst will perform vendor security assessments, validate third-party controls, and maintain a mature vendor risk management program while collaborating with various stakeholders. Key ResponsibilitiesExecute the Third-Party Risk Management lifecycle, including vendor onboarding and periodic reassessments Conduct security assessments for various third-party vendors and evaluate their compliance with security requirements Monitor vendor security posture and maintain accurate vendor risk records within the organization's GRC platformRequired QualificationsStrong experience in performing vendor security assessments and reviewing security documentation Knowledge of SOC 2 Type II reports, ISO 27001 certifications, and security policies Experience collaborating with cross-functional teams including Procurement, Legal, and IT Familiarity with risk management frameworks and regulatory compliance Ability to translate complex technical findings into business risk assessments