Vendor Security Management Analyst

Vendor Security Management AnalystWe are seeking an experienced Vendor Security Management Analyst to support enterprise-wide third-party vendor security assessments, secure vendor onboarding, firewall management, and network security operations. The ideal candidate will have hands-on experience with Information Risk Questionnaires (IRQ), vendor risk assessments, Qualys vulnerability scanning, Palo Alto/Cisco ASA/Fortinet firewall administration, and network troubleshooting.This role requires close collaboration with Product, Engineering, Procurement, Legal, Business, and Security teams to ensure secure vendor connectivity, regulatory compliance, and adherence to enterprise security standards.Experience Required8–10 Years of experience in Vendor Security Management, Network Security, or Information Security.Hands-on production experience with firewall administration and vendor onboarding.Experience supporting enterprise third-party vendor risk management.Vendor Security & Risk ManagementManage end-to-end vendor onboarding through the Information Risk Questionnaire (IRQ) process.Conduct third-party vendor security assessments and risk evaluations.Ensure secure vendor connectivity across enterprise and third-party environments.Coordinate with Legal, Procurement, Product, and Engineering teams throughout vendor onboarding.Firewall & Network SecurityImplement and review firewall rules using: Palo Alto Networks, Cisco ASA, Fortinet.Apply least-privilege access principles for vendor connectivity.Troubleshoot VPN, connectivity, provisioning, and network access issues.Support secure remote access and third-party integrations.Vulnerability ManagementPerform vulnerability scans using Qualys.Analyze scan results and coordinate remediation activities.Track security findings through closure.Ensure compliance with enterprise security policies.Security OperationsInvestigate network provisioning issues.Support Disaster Recovery (DR) readiness activities.Maintain security documentation and tracking reports.Assist in vendor security audits and compliance reviews.Collaboration & GovernancePartner with Product, Engineering, Procurement, Legal, and Business teams.Maintain vendor security records and operational dashboards.Support contract, purchase order (PO), and vendor documentation processes.Communicate security risks and mitigation plans to stakeholders.Required Technical SkillsVendor SecurityVendor Security ManagementThird-Party Risk ManagementInformation Risk Questionnaire (IRQ)Vendor Risk AssessmentVendor OnboardingSecurity ComplianceNetwork SecurityPalo Alto FirewallsCisco ASAFortinetFirewall Rule ManagementNetwork SecurityVPNNetwork TroubleshootingSecure ConnectivityVulnerability ManagementQualysVulnerability AssessmentVulnerability ScanningRisk RemediationSecurity OperationsDisaster Recovery (DR)Access ManagementIncident CoordinationSecurity GovernanceToolsQualysPalo AltoCisco ASAFortinetTableauExcelWrikeSlackWebExBOXHaloQuipClaude AIPreferred SkillsThird-Party Risk Management (TPRM)Vendor GovernanceSecurity AuditsAccess ManagementIdentity & Access Management (IAM)Security PoliciesCompliance FrameworksNetwork InfrastructureCloud Security