Data Analyst I

Summary:

The Third Party Risk Senior Analyst, will manage and execute assessments to identify, manage, and communicate risk across the enterprise. This role will work with various teams within the company Enterprise, including Privacy, Legal, IT, and Procurement to advise on third party risk topics that include information security, business resiliency, reputation, finance, ethics, compliance, and insurance. In addition, the Senior Analyst will support team processes, develop reporting/metrics, and ensure data integrity within Archer eGRC.

Key Responsibilities (Essential Functions) - List in order of importance:

• Conduct enterprise-wide third party risk assessments of companies external partners.
• Execute, coordinate and support risk assessments to identify and prioritize risks.
• Facilitate and analyze responses of Risk Profiles to ensure the appropriate level of risk is assigned to each third party service line.
• Assess risks and prioritize based on existing, internally approved information risk ranking models.
• Create, organize, and maintain reporting/metrics within Archer eGRC.
• Conduct reassessments based on inherent risk schedule.
• Advise partners regarding inherent and residual risk posed by third parties.
• Effectively communicate roles and responsibilities pertaining to the assessment process and finding remediation with internal business teams and external vendors.
• Assist in communications to business partners on impact, likelihood and severity of risks in driving risk remediation efforts.
• Collaborate with various audiences, including Security Architecture, Application Security, IT, BC/DR, Legal, Procurement and others.
• Maintain relationships with internal company teams through clear, consistent communication.
• Support team intake process to ensure appropriate responses and resources are communicated to enterprise partners regarding general questions, assessment requests and other inquiries as needed.
• Serve as Business Resiliency risk liaison to understand finding requirements and relay learnings to the Third Party Risk team.
  

Requirements:

• Bachelors Degree (4 yr) or Equivalent Industry Experience
• Minimum 2+ years of experience in the TPRM risk category Information Securit
• Familiarity with the Payment Card Industry Data Security Standard (PCI DSS), NIST Cyber Security Framework (CSF), and ISO 27000 series
• 2 years of experience performing risk assessments or audits
• Strong interpersonal and communication skills with the ability to develop productive working relationships with technical and non-technical teams
• Ability to work in a fast-paced environment within a team
  
  

Preferred/Nice to have skills:

• CISSP, Security+, Network+, or SSCP certification
• Experience in the TPRM risk categories Business Resiliency, Finance, Ethics/Compliance, or Insurance.
• Experience with Archer GRC tool.
• Ability to work with a start-up mentality inside of a large organization to provide security recommendations with the business strategy and goals in mind.
  
  

Compensation:

The pay rate range above is the base hourly pay range that Aditi Consulting reasonably expects to pay someone for this position (compensation may vary outside of this range depending on a number of factors, including but not limited to, a candidate’s qualifications, skills, competencies, experience, location and end client requirements).

Benefits and Ancillaries:

Medical, dental, vision, PTO benefits and ancillaries may be available for eligible Aditi Consulting employees and vary based on the plan options selected by the employee.