Analyst, Vendor Risk Management
- Location: Hybrid In Washington, DC Metro Area
- United States Citizenship Required
The Position
The Analyst, Vendor Risk Management will work with clients to identify client supply chain risk and cybersecurity challenges, advise on best practices in vendor risk management, and ensure successful delivery of BlueVoyant solutions to solve customer problems. The incumbent will consult directly with clients to establish and improve the management of vendor risks, implement third-party cybersecurity risk management programs and support the day-to-day review of and interaction with third party vendors.
Key Responsibilitie
- sParticipate in third-party risk management consulting engagements as part of BlueVoyant’s Supply Chain Defense busines
- sSupport Third Party Risk Workshops at BlueVoyant Clients focused on the following topics
- :Vendor Identification and Stratificatio
- nVendor On-boarding, Monitoring and Remediatio
- nCybersecurity Risk Questionnaire Developmen
- tProject and program delivery, including project and process management, reporting, engagement in senior leadership meetings, drafting and reviewing materials for senior management and other governance activitie
- sCommunicate findings and recommendations to client stakeholders, best practices, tools and technolog
- yMature standard operating procedures for customers to optimize utilization of BlueVoyant’s offering
- sEnable business development in renewal, cross-sell, and up-sell opportunities of BlueVoyant offerings while maintaining client trus
- tCreate repeatable processes and frameworks portable across clients and industries to accelerate future Third-Party Risk Cybersecurity Risk Management implementation
- sWork 1-2 Days per week from Washington, DC area offic
- eTravel to clients as requeste
d
Qualificatio
- nsCISSP or similar preferre
- d.Familiarity with encryption fundamentals and network design require
- d.2+ years of Third-Party Risk Management consulting (including vendor cybersecurity risk) at a Big 4 consulting firm or vendor risk management compa
- ny3+ years leading an enterprise risk management program, including Third-Party Risk, Internal Risk Maturity and Assessment, Risk Consolidation, and Risk Reporti
- ngInformation security/cybersecurity accreditation and backgrou
- ndExperience working in a cybersecurity or technology organizati
- onEntrepreneurial nature and drive for resul
- tsClear communication and writing skil
- lsAbility to conduct deep client discovery to uncover root cause problems and build trusted relationshi
- psAbility to design programs and solutions with minimal guidance and oversig
ht
About BlueVoy
antAt BlueVoyant, we recognize that effective cyber security requires active prevention and defense across both your organization and supply chain. Our proprietary data, analytics, and technology, coupled with deep expertise, works as a force multiplier to secure your full ecosystem. Accuracy! Actionability! Timeliness! Scalabili
ty!
Led by CEO, Jim Rosenthal, BlueVoyant’s highly skilled team includes former government cyber officials with extensive frontline experience in responding to advanced cyber threats on behalf of the National Security Agency, Federal Bureau of Investigation, Unit 8200, and GCHQ, together with private sector experts. BlueVoyant services utilize large real-time datasets with industry leading analytics and technolog
ies.
Founded in 2017 by Fortune 500 executives, including Executive Chairman, Tom Glocer, and former Government cyber officials, BlueVoyant is headquartered in New York City and has offices in Maryland, Tel Aviv, San Francisco, London, Budapest, and Latin Ame
rica.
All employees must be authorized to work in the United States. BlueVoyant provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, BlueVoyant complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facil
ities.
Disclaimer: Please note that pursuant to contractual requirements and applicable law, in order for employees to perform work on some of the company’s federal contracts, U.S. citizenship is required. Accordingly, an employee’s ability to perform work on such contracts is contingent upon the company’s verification of the employee’s citizenship status. Furthermore, individuals may be subject to additional background checks and fingerpr
inting.