Vendor Security Management Analyst

Vendor Security Management Analyst

We are seeking an experienced Vendor Security Management Analyst to support enterprise-wide third-party vendor security assessments, secure vendor onboarding, firewall management, and network security operations. The ideal candidate will have hands-on experience with Information Risk Questionnaires (IRQ), vendor risk assessments, Qualys vulnerability scanning, Palo Alto/Cisco ASA/Fortinet firewall administration, and network troubleshooting.

This role requires close collaboration with Product, Engineering, Procurement, Legal, Business, and Security teams to ensure secure vendor connectivity, regulatory compliance, and adherence to enterprise security standards.

Experience Required

• 810 Years of experience in Vendor Security Management, Network Security, or Information Security.
• Hands-on production experience with firewall administration and vendor onboarding.
• Experience supporting enterprise third-party vendor risk management.

Vendor Security & Risk Management

• Manage end-to-end vendor onboarding through the Information Risk Questionnaire (IRQ) process.
• Conduct third-party vendor security assessments and risk evaluations.
• Ensure secure vendor connectivity across enterprise and third-party environments.
• Coordinate with Legal, Procurement, Product, and Engineering teams throughout vendor onboarding.

Firewall & Network Security

• Implement and review firewall rules using: Palo Alto Networks, Cisco ASA, Fortinet.
• Apply least-privilege access principles for vendor connectivity.
• Troubleshoot VPN, connectivity, provisioning, and network access issues.
• Support secure remote access and third-party integrations.

Vulnerability Management

• Perform vulnerability scans using Qualys.
• Analyze scan results and coordinate remediation activities.
• Track security findings through closure.
• Ensure compliance with enterprise security policies.

Security Operations

• Investigate network provisioning issues.
• Support Disaster Recovery (DR) readiness activities.
• Maintain security documentation and tracking reports.
• Assist in vendor security audits and compliance reviews.

Collaboration & Governance

• Partner with Product, Engineering, Procurement, Legal, and Business teams.
• Maintain vendor security records and operational dashboards.
• Support contract, purchase order (PO), and vendor documentation processes.
• Communicate security risks and mitigation plans to stakeholders.

Required Technical Skills

Vendor Security

• Vendor Security Management
• Third-Party Risk Management
• Information Risk Questionnaire (IRQ)
• Vendor Risk Assessment
• Vendor Onboarding
• Security Compliance

Network Security

• Palo Alto Firewalls
• Cisco ASA
• Fortinet
• Firewall Rule Management
• Network Security
• VPN
• Network Troubleshooting
• Secure Connectivity

Vulnerability Management

• Qualys
• Vulnerability Assessment
• Vulnerability Scanning
• Risk Remediation

Security Operations

• Disaster Recovery (DR)
• Access Management
• Incident Coordination
• Security Governance

Tools

• Qualys
• Palo Alto
• Cisco ASA
• Fortinet
• Tableau
• Excel
• Wrike
• Slack
• WebEx
• BOX
• Halo
• Quip
• Claude AI

Preferred Skills

• Third-Party Risk Management (TPRM)
• Vendor Governance
• Security Audits
• Access Management
• Identity & Access Management (IAM)
• Security Policies
• Compliance Frameworks
• Network Infrastructure
• Cloud Security

Purple Drive Technologies