It Risk Analyst, Vendor Management

Position Summary
The position of IT Risk Analyst, Vendor Management is responsible for participating in Information Security Compliance and Risk (ISCR) initiatives. The core responsibility for this position is within the Vendor Management program. The candidate should demonstrate a basic understanding of risk methodology, the ability to maintain quality service standards set by the organization, the desire to learn, and a willingness to work with organizations outside the department.
Essential Duties and Responsibilities

• Perform vendor risk assessments as assigned. Work with vendors and business owners to gather documentation and develop vendor remediation plans.
• Participate in the peer review process for risk assessments. Work with ISCR team members to help ensure the accuracy of risk reports.
• Schedule and participate in risk management meetings for vendor risk assessments, application risk assessments, and branch risk assessments as a representative of ISCR.
• Acquire proficiency within the GRC solution as it pertains to risk assessments and risk register functionality.
• Follow prescribed SLAs, and ensure timely completion of all tasks. Escalate non-compliance of SLAs to the Vice President, Vendor Management.
• Create metrics and reports to regularly report on the health of assigned activities.
• Assist in the design and presentation of security education and awareness training as required.
• Ensure all assigned programs have documented procedures which are current and relevant for the program.

Other Duties and Responsibilities

• Perform application assessments and branch security risk assessments as required.
• Participate in security and/or risk related committees as required.
• Assist with ISCR initiatives as assigned by the Vice President, Vendor Management.

Physical Demands and Work Environment
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
While performing the duties of this job, the employee is regularly required to use hands and fingers to handle or feel objects, tools, or controls and talk or hear. The employee is frequently required to stand and reach with hands and arms. The employee is occasionally required to walk; sit; climb or balance; and stoop, kneel, crouch, or crawl.
The employee must occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus.
The noise level in the work environment is usually moderate.
Minimum Qualifications (Education, Experience, Skills)

• Bachelor's Degree; or coursework in IT, Security, or Risk Management.
• 2 years' experience in, IT Security, Vendor Management, or Risk Management.
• Information security and/or risk certification(s) desirable.
• Track record of producing quality deliverables under limited supervision.
• Sufficient organizational skills to be able to prioritize concurrent projects effectively and meet deadlines and commitments.
• Effective written skills, verbal communications, and positive interpersonal skills.
• Intermediate level Microsoft Word, Excel, and PowerPoint skills.