Vendor Security Management Analyst

Job Title

Vendor Security Management Analyst

Job Summary

We are seeking an experienced Vendor Security Management Analyst to support enterprise-wide third-party vendor security assessments, secure vendor onboarding, firewall management, and network security operations . The ideal candidate will have hands-on experience with Information Risk Questionnaires (IRQ) , vendor risk assessments , Qualys vulnerability scanning , Palo Alto/Cisco ASA/Fortinet firewall administration , and network troubleshooting .

This role requires close collaboration with Product, Engineering, Procurement, Legal, Business, and Security teams to ensure secure vendor connectivity, regulatory compliance, and adherence to enterprise security standards.

Experience Required

• 8-10 Years of experience in Vendor Security Management , Network Security, or Information Security.
• Hands-on production experience with firewall administration and vendor onboarding.
• Experience supporting enterprise third-party vendor risk management.

Key Responsibilities

Vendor Security & Risk Management

• Manage end-to-end vendor onboarding through the Information Risk Questionnaire (IRQ) process.
• Conduct third-party vendor security assessments and risk evaluations.
• Ensure secure vendor connectivity across enterprise and third-party environments.
• Coordinate with Legal, Procurement, Product, and Engineering teams throughout vendor onboarding.

Firewall & Network Security

• Implement and review firewall rules using:
  • Palo Alto Networks
  • Cisco ASA
  • Fortinet
• Apply least-privilege access principles for vendor connectivity.
• Troubleshoot VPN, connectivity, provisioning, and network access issues.
• Support secure remote access and third-party integrations.

Vulnerability Management

• Perform vulnerability scans using Qualys .
• Analyze scan results and coordinate remediation activities.
• Track security findings through closure.
• Ensure compliance with enterprise security policies.

Security Operations

• Investigate network provisioning issues.
• Support Disaster Recovery (DR) readiness activities.
• Maintain security documentation and tracking reports.
• Assist in vendor security audits and compliance reviews.

Collaboration & Governance

• Partner with Product, Engineering, Procurement, Legal, and Business teams.
• Maintain vendor security records and operational dashboards.
• Support contract, purchase order (PO), and vendor documentation processes.
• Communicate security risks and mitigation plans to stakeholders.

Required Technical Skills

Vendor Security

• Vendor Security Management
• Third-Party Risk Management
• Information Risk Questionnaire (IRQ)
• Vendor Risk Assessment
• Vendor Onboarding
• Security Compliance

Network Security

• Palo Alto Firewalls
• Cisco ASA
• Fortinet
• Firewall Rule Management
• Network Security
• VPN
• Network Troubleshooting
• Secure Connectivity

Vulnerability Management

• Qualys
• Vulnerability Assessment
• Vulnerability Scanning
• Risk Remediation

Security Operations

• Disaster Recovery (DR)
• Access Management
• Incident Coordination
• Security Governance

Tools

• Qualys
• Palo Alto
• Cisco ASA
• Fortinet
• Tableau
• Excel
• Wrike
• Slack
• WebEx
• BOX
• Halo
• Quip
• Claude AI

Preferred Skills

• Third-Party Risk Management (TPRM)
• Vendor Governance
• Security Audits
• Access Management
• Identity & Access Management (IAM)
• Security Policies
• Compliance Frameworks
• Network Infrastructure
• Cloud Security