Cybersecurity Risk Analyst

Hamlyn Williams - Tempe, AZ

Full-time

Tempe, AZ

Professional, Scientific, and Technical Services

About the position

The Cybersecurity Risk Analyst position at Hamlyn Williams involves assessing third-party security risks to ensure compliance with legal and regulatory standards. The role requires evaluating vendor-submitted documentation and questionnaires to identify potential security risks, necessitating a strong understanding of information security frameworks and analytical skills.

Responsibilities

• Conduct reviews of vendor materials, such as SOC reports, certifications, and policies, to ensure they meet our security standards.
• Identify and document any security gaps, requesting additional information as needed through the vendor management process.
• Collaborate with various teams to align security efforts with regulatory standards and industry best practices.
• Report on the status of vendor security reviews, including metrics on volume and progress.

Requirements

• Bachelor's degree in Information Systems, related field, or equivalent experience.
• Minimum 3 years of hands-on experience in conducting vendor security assessments.
• Familiarity with security frameworks such as ISO 27001/2, NIST CSF, NIST SP 800-53, SIG, etc.
• Strong analytical and organizational skills, with an ability to translate complex security details into actionable insights.

Nice-to-haves

• Industry certifications (CISA, CRISC, CISM, etc.) are a plus but not required.