Security Analyst - IT Compliance Vendor Services

Description: The IT Compliance VendorRisk Management unit's Security Analyst is responsible for performing the Vendorrisk assessment process including the review and scoring of inherent risk questionnaires, initiating and managing the due diligence process with cross functional control group and completing overall risk assessment summaries.

Principal Responsibilities:

- Assists with readying Vendor risk data for migration by mapping

old data to new fields and completing Quality assurance reviews

of data.
- Supports the development and maintenance of a master vendor

list including data scrubbing, validation and de-duplication.
- Performs evaluation of Third Party and Vendor engagements to

identify and manage vendor risk which may include completion

of inherent and overall risk assessments and initiating due

diligence with cross function SME control groups in accordance

with procedures and job aids.

- Develops and performs reporting for VRM including data

collection, consolidation, analysis, spreadsheets and

dashboards in support of the VRM process.
- Completes quality control reviews and testing to ensure

procedures are followed.
- Performs other responsibilities or tasks as requested.

Experience:

- 4-8 years in a professional environment.
- Experience with data cleanup projects involving vendor types of

information.
- Experience in Vendor management, Operational or Enterprise

Risk, Internal Audit or Corporate Procurement or Contracts.

Knowledge and Skills Required:

- Strong work ethic, time management, detail oriented.
- Strong written and verbal communication skills.
- Demonstrated ability to meet deliverables on time.
- Proficient PC skills, specifically with business-oriented

applications such as Word, Excel and PowerPoint.
- Strong excel skills including pivot tables, the ability to create

charts and dashboards.
- Knowledge of risk and controls practices, procedures and

principles.