Data Analyst

Aditi Consulting • Contract • Richfield, MN, US • $33 - $36 / hour • 1d ago

Payrate: $33.73 - $36.73/hr.

Summary:
The Third-Party Risk Management team evaluates the overall risk posture of all our Goods Not For Resale (GNFR) vendors. This includes assessing responses to our vendor risk questionnaires and comparing them against the expectations outlined in our Vendor Privacy and Security Policy (contract addendum).

Responsibilities:

While Information Security remains a primary focus, our reviews also encompass other critical risk domains such as business continuity and disaster recovery (BCDR), financial stability, ethics and legal compliance, labor and environmental practices, and brand/reputational risk.
We leverage both internal and external subject matter experts to support our assessments and address any concerns that arise.
When we identify gaps between contractual obligations and vendor performance—particularly in non-Information Security areas—we document these as findings.
These findings require remediation by the vendor and must be communicated effectively to business owners, Procurement, and the vendors themselves.
As such, analysts must be adept at tailoring communications for diverse audiences.
Our team collaborates closely with Information Security, other Enterprise Risk and Compliance (ERC) teams, Procurement, Legal, and business stakeholders to ensure a comprehensive and aligned approach to third-party risk management.
This initiative is designed to support the Third-Party Risk Management team by conducting comprehensive risk assessments of both new and existing Goods Not For Resale (GNFR) vendors.
The primary objective is to evaluate vendor risk profiles and ensure alignment with our organizational standards and policies.

Qualifications:

2 years of experience performing risk assessments or audits
Minimum 2+ years of experience in the TPRM risk category Information Security
Familiarity with the Payment Card Industry Data Security Standard (PCI DSS), NIST Cyber Security Framework (CSF), and ISO 27000 series
Strong interpersonal and communication skills with the ability to develop productive working relationships with technical and non-technical teams
Ability to work in a fast-paced environment within a team

Desired Skills:

CISSP, Security+, Network+, or SSCP certification
Experience in the TPRM risk categories Business Resiliency, Finance, Ethics/Compliance, or Insurance.
Experience with Archer GRC tool.
Ability to work with a start-up mentality inside of a large organization to provide security recommendations with the business strategy and goals in mind.

Pay Transparency: The typical base pay for this role across the U.S. is: $33.73 - $36.73/hr. Final offer amounts, within the base pay set forth above, are determined by factors including your relevant skills, education and experience and the benefits package you select. Full-time employees are eligible to select from different benefits packages. Packages may include medical, dental, and vision benefits, 10 paid days off, 401(k) plan participation, commuter benefits and life and disability insurance.

For information about our collection, use, and disclosure of applicant's personal information as well as applicants' rights over their personal information, please see our Privacy Policy (https://www.aditiconsulting.com/privacy-policy).

Aditi Consulting LLC uses AI technology to engage candidates during the sourcing process. AI technology is used to gather data only and does not replace human-based decision making in employment decisions. By applying for this position, you agree to Aditi’s use of AI technology, including calls from an AI Voice Recruiter.

#AditiConsulting
# 25 - 21737