Cyber Risk Analyst - Senior

Primary Talent Partners•Columbus, OH

18h•Onsite

About The Position

Primary Talent Partners is hiring a Senior Cyber Risk Analyst on a 12-month W2 contract, with potential extensions, to support a gas and electric company in Columbus, Ohio. The role develops, maintains, and executes the Cyber Assessments program, also known as Third Party Risk Management (TPRM), and supports the enterprise TPRM technology platform. The analyst coordinates supplier and vendor control assessments, including inherent-risk ranking and control assessments, to provide transparency into third-party risk profiles. The analyst works with teams including NERC CIP Compliance, Pipeline Compliance, Innovation, Supply Chain, IT, Enterprise Security, Internal Audit, and business partners. The role manages and reports third-party cyber risks by maintaining risk profiles, tracking supplier issues and exceptions, and developing reports, dashboards, and metrics. It also supports the adoption and effective use of the GRC platform, including Archer, and helps communicate assessment results to management, vendor relationship owners, and Supply Chain. Success involves improving the Cyber Assessments program, reducing vendor risk, supporting continuous monitoring, and providing third-party risk profiles for vendor onboarding and contract renewals. The role also helps integrate the GRC system with systems of record such as Workday and ServiceNow, and supports informed vendor-management decisions through analysis of risk posture, issues, exceptions, and related data.

Requirements

Bachelor’s degree or equivalent work experience providing knowledge of fundamental theories, principles, and concepts.
At least 6 years of TPRM experience in varying support functions.
At least 6 years of experience with Vendor Control Assessments, SOC 2 reports, and metrics.
In-depth experience with TPRM processes, reporting, and metrics.
Knowledge of TPRM components, trends, and best practices.
Solid computer, operating system, and software skills, including Microsoft Office 365, and ability to learn technical concepts quickly.
Analytical skills, including process analysis and development, problem solving, and root cause analysis.
Teamwork, collaboration, negotiation, communication, organizational, people management, and conflict-resolution skills.
Involvement in multiple process improvement initiatives.
Good written and verbal communication skills.
Demonstrated participation in successful delivery of TPRM projects.
Ability to work independently across multiple functional domains with minor assistance.
Solid understanding of the NIST 800 CSF.
Company business operations knowledge.
Working knowledge of the gas and electric utility industry; additional experience is a plus.
Must be legally authorized to work in the United States and able to work on Primary Talent Partners’ W2 without sponsorship.

Nice To Haves

Demonstrated experience with Microsoft Excel and Word.
Demonstrated experience with SharePoint.
Demonstrated experience in reporting and analytics.
Experience using the Archer GRC tool.
Additional experience in the gas and electric utility industry.

Responsibilities

Perform routine Cyber Assessment Analyst assignments under the direction of the Director of Cyber and the Manager of Cyber Assessments.
Work with business, OT, IT, Cyber, and service-provider teams to perform or support TPRM and Cyber Assessment processes.
Assist with implementation roadmaps for Cyber Assessments, Archer, and Fortress Control Assessments.
Help execute the Cyber Assessment program, including communicating the methodology, mitigating risks, communicating results, and producing program metrics.
Conduct or assist with Cyber Assessments for business, Cyber, IT, OT, and Innovation, ensuring Supply Chain processes are followed and reviews meet objectives, budget, timeline, and reporting requirements.
Build knowledge of Fortress Control Assessments and contribute to the product’s direction, use, and business value.
Build knowledge of Archer and contribute to its direction, use, and business value; act as an Archer ambassador and support broader adoption across the company.
Assist with audit and issue tracking and resolution related to Cyber Assessments.
Advance the use and adoption of Archer RSA to manage risk, compliance, policy monitoring, and tracking.
Maintain third-party risk profiles and track supplier issues and exceptions.
Analyze vendor risk posture and related data to support management decisions.
Create reports, dashboards, and metrics for third-party cyber risks and communicate assessment results to management, vendor relationship owners, and Supply Chain.
Support continuous monitoring and provide third-party risk profiles for vendor onboarding and contract renewal processes.