Duration: 10 Months + Extension
Schedule: Mon-Fri, Core Business Hours, 37.5 Hours/Week, 7.5 Hours/Day
Job Description:
- Seeking an experienced Risk Analyst to support supplier risk and security initiatives within the client's Procurement organization.
- Responsible for reviewing supplier security requirements, assessing third-party technology risks, and providing security-contracting advisory services.
- Partner with Procurement, Legal, Security, and Technology Risk teams to evaluate supplier exceptions and recommend risk-based decisions.
- Support ongoing transformation initiatives while ensuring alignment with security policies, regulatory expectations, and third-party risk frameworks.
Responsibilities:
- Review supplier redlines, exceptions, and proposed substitutions impacting security obligations.
- Assess supplier security controls and alternative control frameworks.
- Evaluate supplier risk profiles based on services, hosting models, and data access.
- Translate technical security requirements into business and contractual language.
- Support contract managers during supplier negotiations.
- Document negotiation rationale and recommended positions.
- Identify contractual changes that weaken security obligations.
- Review cloud-related supplier security requirements.
- Assess security impacts related to SaaS solutions.
- Assess security impacts related to outsourcing arrangements.
- Assess security impacts related to managed services.
- Evaluate incident notification requirements.
- Review audit and assurance provisions.
- Review data protection obligations, access control requirements, subcontracting provisions, business continuity obligations, resilience requirements, termination and exit obligations.
- Coordinate with Security stakeholders on contractual matters.
- Coordinate with Legal stakeholders on contractual matters.
- Coordinate with Technology Risk stakeholders on contractual matters.
- Escalate policy exceptions and material deviations.
- Prepare decision papers and risk recommendations.
- Maintain audit trails of approvals and negotiated positions.
- Support security-contracting playbook updates.
- Develop clause guidance and fallback language.
- Deliver training sessions to procurement teams.
- Provide knowledge transfer and process guidance to stakeholders.
Experience:
- Must have 10+ years of experience in Information Security, Cybersecurity, Technology Risk, Third-Party Risk Management, Vendor Risk Management.
- Must have 8+ years of experience assessing supplier security controls, experience with evaluating third-party technology risks.
- Must have experience supporting cloud security assessments, SaaS risk assessments, outsourcing risk assessments, managed services risk assessments.
- Must have working knowledge of NIST frameworks, ISO/IEC 27001, ISO/IEC 27002, SOC 1 reports, SOC 2 reports.
- Must have experience interpreting contractual security language, negotiating supplier security exceptions, partnering with Procurement teams, Legal teams, Security teams, Contract Lifecycle Management (CLM) knowledge.
- Must have strong Microsoft Office Suite skills, written communication skills, verbal communication skills, presentation skills.
- Must have experience documenting decisions and recommendations.
- Must have the ability to manage multiple negotiations simultaneously, communicate technical concepts in business terms.
- Must have experience training procurement teams, providing knowledge transfer sessions.
- Must have banking experience preferred.
- Must have financial services industry experience preferred.
Education:
- Bachelor's Degree required.
Certifications: CISSP / CISM / CISA / CRISC
Shift Hours: Core Business Hours
About US Tech Solutions:
US Tech Solutions is a global staff augmentation firm providing a wide range of talent on-demand and total workforce solutions. To know more about US Tech Solutions, please visit www.ustechsolutions.com.
US Tech Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
AI Statement: By applying, you acknowledge that AI-assisted tools may be used during hiring.
Recruiter Details:
Name: Shubham Deep Gautam
Email: shubham.gautam@ustechsolutionsinc.com
Internal ID: # 26-27113
