Cyber Security Analyst

TEKsystems•Sioux Falls, SD

3d•$60 - $65•Remote

About The Position

A leading healthcare organization is seeking a Cybersecurity Program Analyst to support cybersecurity governance, risk, and compliance initiatives while helping enhance and mature its Third-Party Risk Management (TPRM) program. This role offers a unique opportunity to contribute to both operational execution and strategic cybersecurity program improvements within a growing and mission-driven environment. The successful candidate will partner with cybersecurity leadership to improve risk management processes, strengthen vendor oversight, support compliance initiatives, and drive program maturity efforts. Approximately 75% of the role will focus on cybersecurity governance, risk, and compliance functions, while 25% will focus on third-party risk management activities. This is a 100% remote opportunity supporting Central Time business hours.

Requirements

5+ years of experience in cybersecurity, governance risk and compliance (GRC), or risk management.
Experience supporting Third-Party Risk Management (TPRM) programs.
Strong understanding of cybersecurity frameworks and controls, including NIST and HIPAA.
Experience reviewing security assessments, questionnaires, and related documentation.
Strong written and verbal communication skills.
Ability to work independently while managing multiple priorities and deadlines.
Experience supporting cybersecurity governance and compliance initiatives.

Nice To Haves

Healthcare industry experience.
Experience with vendor risk management platforms.
Hands-on experience with Drata.
Experience developing cybersecurity policies, standards, and procedures.
Background supporting cybersecurity program improvement and maturity initiatives.

Responsibilities

Conduct vendor security reviews and risk assessments.
Analyze security questionnaires, audit reports, and supporting documentation.
Participate in vendor risk review meetings and follow-up discussions.
Support vendor onboarding, renewal, and ongoing lifecycle management activities.
Assist with developing vendor risk-tiering methodologies and criticality frameworks.
Help design and implement vendor offboarding processes.
Review and help close vendor risk assessments while ensuring appropriate documentation and follow-through.
Support cybersecurity program maturity and governance initiatives.
Assist with cybersecurity policy, standards, and procedure development.
Research and document cybersecurity controls, requirements, and best practices.
Align cybersecurity documentation with HIPAA and NIST frameworks.
Review, maintain, and enhance the organization's risk register.
Support governance reporting, metrics development, and executive-level reporting.
Document current-state processes and identify operational improvement opportunities.
Develop recommendations and implementation plans for program enhancements.
Collaborate with cybersecurity leadership on strategic initiatives and action plans.