Analyst, Information Security GRC

Tasks

• Assess third party due diligence results
• Build and maintain security metrics dashboards
• Coordinate with internal stakeholders and external vendors
• Escalate nonresponsive third parties
• Execute TPRM processes according to governance requirements
• Execute third party risk management activities
• Follow up on information risk questionnaires
• Improve reporting accuracy and processing automation
• Manage vendor security risk assessments
• Open document and track third party risk issues
• Request missing or outdated evidence
• Review evidence for completeness and sufficiency
• Review third party intake form queues
• Support continuous improvement of tools workflows and documentation
• Support data and AI governance due diligence
• Support issue lifecycle management and remediation tracking
• Trigger monitor and track third party assessments
• Update status reports for risk issues

Perks/Benefits

• N/A

Skills/Tech-stack

AI Governance | Compliance Management | Cybersecurity | Dashboarding | Data Governance | Data and AI | Data and AI Governance | Document Review | Due Diligence | Evidence review | GRC | Governance | Information security | Issue Tracking | Metrics Reporting | PowerBI | Process Automation | Responsible AI | Risk Assessment | Risk Management | Risk issue tracking | Third Party | Third-Party Risk | Third-party governance | Third-party risk management | Vendor Risk | Vendor Risk Assessment | Workflow Management