Apply on Employer Site

BlueVoyant · 2 days ago

Analyst, Vendor Risk Management

United States

Full-time

Remote

Mid Level

3+ years exp

BlueVoyant is a cybersecurity company that focuses on effective cyber security through active prevention and defense across organizations and their supply chains. The Analyst, Vendor Risk Management will work with clients to identify supply chain risk and cybersecurity challenges, advise on best practices in vendor risk management, and ensure successful delivery of BlueVoyant solutions.

Cyber SecurityNetwork SecuritySecuritySoftware

No H1B

Responsibilities

Participate in third-party risk management consulting engagements as part of BlueVoyant’s Supply Chain Defense business

Support Third Party Risk Workshops at BlueVoyant Clients focused on the following topics:

Vendor Identification and Stratification

Vendor On-boarding, Monitoring and Remediation

Cybersecurity Risk Questionnaire Development

Project and program delivery, including project and process management, reporting, engagement in senior leadership meetings, drafting and reviewing materials for senior management and other governance activities

Communicate findings and recommendations to client stakeholders, best practices, tools and technology

Mature standard operating procedures for customers to optimize utilization of BlueVoyant’s offerings

Enable business development in renewal, cross-sell, and up-sell opportunities of BlueVoyant offerings while maintaining client trust

Create repeatable processes and frameworks portable across clients and industries to accelerate future Third-Party Risk Cybersecurity Risk Management implementations

Travel to Clients as requested

German or French as a first or second language preferable but not essential

Qualification

CISSPThird-Party Risk ManagementInformation security accreditationCybersecurity experienceEncryption fundamentalsEntrepreneurial natureClient relationship buildingProgram designClear communication

Required

Familiarity with encryption fundamentals and network design required

1+ years of Third-Party Risk Management consulting (including vendor cybersecurity risk) at a Big 4 consulting firm or vendor risk management company

2+ years leading an enterprise risk management program, including Third-Party Risk, Internal Risk Maturity and Assessment, Risk Consolidation, and Risk Reporting

Information security/cybersecurity accreditation and background

Experience working in a cybersecurity or technology organization

Entrepreneurial nature and drive for results

Clear communication and writing skills

Ability to conduct deep client discovery to uncover root cause problems and build trusted relationships

Ability to design programs and solutions with minimal guidance and oversight