Cyber Risk Analyst

Cyber Assessments Analyst - Third Party Risk Management

Help a gas and electric utility assess supplier cyber risk and improve its third-party risk management program. You will maintain risk profiles, track issues and exceptions, and turn assessment results into clear reporting for business and security teams.

This is a 12-month contract opportunity U.S. Citizenship required

Location: Columbus, OH or Merrillville, IN; local candidates required

Work Type: Hybrid; onsite 3 days per week

Responsibilities

• Execute supplier inherent-risk and control assessments across business, IT and OT environments.
• Review vendor evidence, including SOC 2 reports, and document risk findings.
• Maintain supplier risk profiles and track issues, exceptions and remediation progress.
• Produce dashboards, metrics and assessment readouts for stakeholders.
• Partner with supply chain on vendor onboarding, renewals and continuous monitoring.
• Support Archer and Fortress assessment workflows, roadmaps and adoption.
• Assist with audit issue resolution and improve assessment processes.
• Communicate assessment methodology and results across security, compliance and business teams.

Required Qualifications

• Bachelor's degree or equivalent work experience providing relevant foundational knowledge.
• 6+ years of TPRM experience and 6+ years with vendor control assessments, SOC 2 reports and metrics.
• In-depth TPRM process, reporting and metrics experience; participation in successful TPRM projects and multiple process improvements.
• Solid understanding of NIST cybersecurity frameworks; strong analytical, process-development and root-cause analysis skills.
• Working knowledge of gas and electric utilities and familiarity with the hiring organization's business operations.
• Proficiency with Microsoft Office 365, strong communication and collaboration skills, and ability to work independently with minor assistance.
• US citizenship; residence in the Columbus, OH or Merrillville, IN area and ability to report onsite 3 days per week.

Preferred Qualifications

• Experience using Archer GRC.
• Experience with SharePoint.
• Demonstrated reporting and analytics experience.
• Demonstrated proficiency in Excel and Word.