Analyst, Vendor Risk Management
Like the look of this opportunity Make sure to apply fast, as a high volume of applications is expected Scroll down to read the complete job description.
- Location : Hybrid In Washington, DC Metro Area
- United States Citizenship Required
The Position
The Analyst, Vendor Risk Management will work with clients to identify client supply chain risk and cybersecurity challenges, advise on best practices in vendor risk management, and ensure successful delivery of BlueVoyant solutions to solve customer problems.
The incumbent will consult directly with clients to establish and improve the management of vendor risks, implement third-party cybersecurity risk management programs and support the day-to-day review of and interaction with third party vendors.
Key Responsibilities
- Participate in third-party risk management consulting engagements as part of BlueVoyant’s Supply Chain Defense business.
- Support Third Party Risk Workshops at BlueVoyant Clients focused on the following topics :
- Vendor Identification and Stratification
- Vendor On-boarding, Monitoring and Remediation
- Cybersecurity Risk Questionnaire Development
- Project and program delivery, including project and process management, reporting, engagement in senior leadership meetings, drafting and reviewing materials for senior management and other governance activities.
- Communicate findings and recommendations to client stakeholders, best practices, tools and technology.
- Mature standard operating procedures for customers to optimize utilization of BlueVoyant’s offerings.
- Enable business development in renewal, cross-sell, and up-sell opportunities of BlueVoyant offerings while maintaining client trust.
- Create repeatable processes and frameworks portable across clients and industries to accelerate future Third-Party Risk Cybersecurity Risk Management implementations.
- Work 1-2 Days per week from Washington, DC area office.
- Travel to clients as requested.
Qualifications
- CISSP or similar preferred.
- Familiarity with encryption fundamentals and network design required.
- 2+ years of Third-Party Risk Management consulting (including vendor cybersecurity risk) at a Big 4 consulting firm or vendor risk management company.
- 3+ years leading an enterprise risk management program, including Third-Party Risk, Internal Risk Maturity and Assessment, Risk Consolidation, and Risk Reporting.
- Information security / cybersecurity accreditation and background.
- Experience working in a cybersecurity or technology organization.
- Entrepreneurial nature and drive for results.
- Clear communication and writing skills.
- Ability to conduct deep client discovery to uncover root cause problems and build trusted relationships.
- Ability to design programs and solutions with minimal guidance and oversight.
About BlueVoyant
At BlueVoyant, we recognize that effective cyber security requires active prevention and defense across both your organization and supply chain.
Our proprietary data, analytics, and technology, coupled with deep expertise, works as a force multiplier to secure your full ecosystem.
Accuracy! Actionability! Timeliness! Scalability!
Led by CEO, Jim Rosenthal, BlueVoyant’s highly skilled team includes former government cyber officials with extensive frontline experience in responding to advanced cyber threats on behalf of the National Security Agency, Federal Bureau of Investigation, Unit 8200, and GCHQ, together with private sector experts.
BlueVoyant services utilize large real-time datasets with industry leading analytics and technologies.
Founded in 2017 by Fortune 500 executives, including Executive Chairman, Tom Glocer, and former Government cyber officials, BlueVoyant is headquartered in New York City and has offices in Maryland, Tel Aviv, San Francisco, London, Budapest, and Latin America.
All employees must be authorized to work in the United States. BlueVoyant provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics.
In addition to federal law requirements, BlueVoyant complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities.
Disclaimer : Please note that pursuant to contractual requirements and applicable law, in order for employees to perform work on some of the company’s federal contracts, U.
S. citizenship is required. Accordingly, an employee’s ability to perform work on such contracts is contingent upon the company’s verification of the employee’s citizenship status.
Furthermore, individuals may be subject to additional background checks and fingerprinting.
BlueVoyant Candidate Privacy Notice
To understand how we secure and manage your personal data upon submitting a job application, please see our Candidate Privacy Notice, which can be found here - Candidate Privacy Notice
J-18808-Ljbffr
Analyst, Vendor Risk Management
Third-Party Risk Management consulting (including vendor cybersecurity risk) at a Big 4 consulting firm or vendor risk management company. The incumbent will consult directly with clients to establish and improve the management of vendor risks, implement third-party cybersecurity risk management pro...
Vendor Risk Management Lead
A company is looking for a Vendor Risk Management Lead to guide and manage risk oversight activities for third-parties throughout the engagement lifecycle. ...
Senior Consultant, Vendor Risk Management
The Senior Consultant of Vendor Risk Management will spearhead the strategic delivery of comprehensive Vendor Risk Management Services. In-depth knowledge of vendor risk management practices and tools, including risk assessment methodologies and compliance standards. Senior Consultant, Vendor Risk M...
Senior Consultant, Vendor Risk Management
The Senior Consultant of Vendor Risk Management will spearhead the strategic delivery of comprehensive Vendor Risk Management Services. In-depth knowledge of vendor risk management practices and tools, including risk assessment methodologies and compliance standards. Senior Consultant, Vendor Risk M...
Analyst, NA Risk & Identity Solutions Management
We are looking for an Analyst to support the NA Value Added Services Risk & Identity Solutions (RaIS) Product Office. Experience in project management, sales support, or administrative roles within the risk, payments, or financial services industry. Assist in the management and execution of prod...
Staff Analyst, Model Risk Management
The Staff Analyst, Model Risk Management will perform highly visible and important work and will touch virtually all functional areas within SoFi. The Staff Analyst, Model Risk Management will spend a majority of their time performing critical reviews of (or "validating") quantitative models planned...
Risk Management Analyst, Workers' Compensation
Job Title: Risk Management Analyst Job Summary: Under the direction of the Risk Manager or his/her designee, provides administrative support and assistance to the Risk Manager in the areas of claims management, safety and general insurance programs; performs related work as assigned. ABILITY TO: Pro...
Title Vendor Management Business Analyst
Organization and time management. ...
Senior Risk Analyst- Risk Management (1823 PEX)
Under general administrative direction, this position will be responsible for overseeing and directing an employee and outside vendors, as well as performing a variety of complex and difficult duties within the Risk Management Division as directed, focusing primarily on the following areas of respon...
Senior Risk Analyst- Risk Management (1823 PEX)
Coordinating the evaluation of Citywide risk management maturity, which includes but is not limited to:Collaborating across City departments to design, develop and administer additional training opportunities for understanding Risk Management processes and industry standards ISO 31000)Reviewing, imp...