Risk Analyst

To support a growing corporate services team, the full-time Risk Analyst will perform third-party security and compliance risk assessments, coordinate user access reviews, and document risk findings while working remotely. Key responsibilities Perform third-party security and compliance risk assessments for vendors, evaluating risk exposure and control effectiveness Coordinate and execute user access reviews, ensuring identified issues are remediated promptly Document risks, findings, recommendations, and remediation plans within governance, risk, and compliance platforms Required qualifications 5+ years of experience in cybersecurity risk, IT risk, information security, governance, risk and compliance (GRC), or related fields Hands-on experience performing third-party or vendor security risk assessments Experience coordinating or performing user access reviews or identity governance activities Familiarity with cybersecurity and compliance frameworks such as NIST CSF, SOC 2, or HIPAA Strong analytical skills with the ability to evaluate complex situations and communicate recommendations effectively