Cyber Risk Analyst

Cyber Assessments Analyst - Third Party Risk Management Help a gas and electric utility assess supplier cyber risk and improve its third-party risk management program. You will maintain risk profiles, track issues and exceptions, and turn assessment results into clear reporting for business and security teams. This is a 12-month contract opportunity U.S. Citizenship required Location: Columbus, OH or Merrillville, IN; local candidates required Work Type: Hybrid; onsite 3 days per week Responsibilities Execute supplier inherent-risk and control assessments across business, IT and OT environments. Review vendor evidence, including SOC 2 reports, and document risk findings. Maintain supplier risk profiles and track issues, exceptions and remediation progress. Produce dashboards, metrics and assessment readouts for stakeholders. Partner with supply chain on vendor onboarding, renewals and continuous monitoring. Support Archer and Fortress assessment workflows, roadmaps and adoption. Assist with audit issue resolution and improve assessment processes. Communicate assessment methodology and results across security, compliance and business teams. Required Qualifications Bachelor's degree or equivalent work experience providing relevant foundational knowledge. 6+ years of TPRM experience and 6+ years with vendor control assessments, SOC 2 reports and metrics. In-depth TPRM process, reporting and metrics experience; participation in successful TPRM projects and multiple process improvements. Solid understanding of NIST cybersecurity frameworks; strong analytical, process-development and root-cause analysis skills. Working knowledge of gas and electric utilities and familiarity with the hiring organization's business operations. Proficiency with Microsoft Office 365, strong communication and collaboration skills, and ability to work independently with minor assistance. US citizenship; residence in the Columbus, OH or Merrillville, IN area and ability to report onsite 3 days per week. Preferred Qualifications Experience using Archer GRC. Experience with SharePoint. Demonstrated reporting and analytics experience. Demonstrated proficiency in Excel and Word. PSI (Proteam Solutions)