Vendor Security Analyst
Hogan Lovells•Washington, DC
•$120,500 - $146,200•Onsite
About The Position
The Vendor Security Analyst performs evaluation of third party and vendor engagements to identify and manage vendor risk which may include completion of risk assessments. They will also conduct the technical security reviews of our suppliers and partners. This role reports to the Head of Information Risk.
Requirements
- Strong and demonstration information security risk identification (including Cloud services), assessment, and risk ranking experience
- Working experience with the following documents used in a risk assessment preferred: SIG (Standardized Information Gathering) questionnaire, Penetration test, Vulnerability test, SOC (Service Organization Control) 1 and 2, Type 2, ISO 27001
- Possess a sufficient understanding of technical concepts including systems, networks, and security architecture best practices in order to effectively evaluate risk and assess the effectiveness of controls
- Confident to make independent decisions
- Ability to explain technical concepts in layman terms
- Ability to interact effectively and influence external vendors
- Keen attention to detail and accuracy in order to analyze documents
- Broad knowledge of risk management, vulnerability management, and third party risk
Nice To Haves
- Bachelor's degree preferred.
Responsibilities
- Evaluate third party risk and steer vendor relationships
- Evaluate vendor responses to security questionnaires
- Make recommendations on ways to mitigate vendor risk
- Maintain vendor risk repository of artifacts including regular third party vendor certifications and assign risk scores to firm suppliers and partners
- Conduct onsite audits of high risk vendors reviewing security and controls
- Actively support and engage in the firm's Responsible Business initiatives, contributing to our commitments to our people, clients, communities, and the environment.
- Provide support on emerging priorities and undertake additional responsibilities as needed to meet evolving business requirements.
Benefits
- medical, dental, and vision insurance
- a 401(k)-retirement plan
- paid time off
- annual discretionary bonuses
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
