Third Party Risk Management Analyst

We're seeking for an Third Party Risk Management Analyst for our direct client.

Please review the below job Description and revert with your interest for the same.

Job details: Role: Risk Management Analyst Location: Columbus, OH(Hybrid) Note: This Hybrid policy however MAY change at any time, and it might become a fully onsite position in the future.

Duration: 6 to 12 Months BGC: From 18th birthday till date background check.

Infinite will conduct BGC(background check) and Drug test.

Client will perform BCI (Bureau of Criminal Investigation) and FBI checks.

BCI takes up to 30 days after fingerprinting.

Onboarding will happen once all checks are complete.

Job description: In the Office of Information Security and Privacy, assists with organization and execution of the Client’s Supplier Risk Management Program: Assist in identifying, developing, and delivering risk assessments of suppliers utilized by State agencies.

Assist in reviewing and providing consultation to security and privacy related clauses in agency and enterprise contracts.

Assist in continuously monitoring and responding to cyber security events, alerts, and incidents related to suppliers Assist in conducting risk assessments of suppliers utilized by State agencies.

Provide written and oral communications with colleagues, agencies, and other personnel related to identified risks, recommended mitigation plans, and associated follow up.

Assist in collaboration with colleagues, agencies, and other personnel in responding to supplier security incidents and tabletop exercises.

Review and analyze documentation provided by suppliers including but not limited to system security packages, independent third-party audit reports, cybersecurity certifications, supplier policies and procedures, or other relevant documentation.

Stay abreast of the latest cyber security threats, attack methods, trends, regulatory, and compliance updates to recommend changes and updates to the supplier risk management program and reflect current industry practices.

Assist in designing, developing, and delivering cyber security training workshops and materials to educate colleagues and agencies on best practices, use of tools, or policies and procedures.

Draft and provide oral and written reports related to supplier risk management activities to leadership and stakeholders.

Employ tools to compile, analyze, and synthesize data to make grounded recommendations to assess and protect against risk exposure and advise business owners with respect to identified risks.

Adhere to the OISP Values Perform other duties as assigned

Full Time