IT Business Systems Analyst
Location:
Juno Beach, FL
Duration:
5-6 Month Contract
Pay Range:$34-39/hr
Our client, a leading energy and utilities organization, is seeking an IT Business Systems Analyst to support its third-party cybersecurity risk program. In this role, you will assess the security posture of vendors across the full vendor lifecycle, covering both standard and expedited reviews. You will analyze vendor security documentation, assign risk ratings, and give clear recommendations to business, procurement, legal, and IT stakeholders. This is a strong fit for someone with a background in third-party risk or cybersecurity who communicates well with senior leadership.
Job Responsibilities:
In this role, you will manage and support a variety of projects within the IT Cybersecurity and Third-Party Risk Management department. Key responsibilities include:
- Conduct cybersecurity risk assessments of third-party vendors throughout the vendor lifecycle
- Perform vendor security assessments for standard and expedited review processes
- Provide risk ratings, requirements, and recommendations for vendor engagements
- Partner with business units, procurement, legal, and IT teams on vendor risk matters
- Present risk findings and recommendations to management and steering committees
- Serve as a subject matter expert on third-party cybersecurity risks
Essential Job Duties and Job Functions:
- Analyze vendor security documentation, certifications, and compliance frameworks
- Manage vendor security questionnaires and the documentation review process
- Ensure vendor assessments comply with industry standards and regulatory requirements
- Maintain comprehensive documentation of risk assessments and mitigation strategies
- Use risk assessment tools and platforms to support vendor evaluations and ongoing monitoring
- Prepare executive-level reporting on vendor risk findings
Knowledge and Skills:
- Strong understanding of cybersecurity frameworks (NIST, ISO 27001, SOC 2)
- Experience with risk assessment tools and platforms (GRC, BitSight, Dun & Bradstreet, etc.)
- Excellent analytical and critical thinking skills
- Strong written and verbal communication abilities
- Project management and organizational skills
- Attention to detail and ability to work under pressure
- Professional communication style suited to executive-level reporting
Education and Experience:
- Bachelor’s degree in Information Security, Computer Science, Business Administration, or a related field (preferred)
- 3-5 years of experience in cybersecurity risk management or third-party risk assessment (preferred)
- Certifications (preferred): CISA (Certified Information Systems Auditor); CTPRA (Certified Third-Party Risk Assessor)
...