Security Analyst I

Role Overview: As a Security Analyst in this remote role, you will be working in Central EU time zone hours. With a minimum of 1 year of experience in a security analyst role, you are expected to have a demonstrated track record of success in developing and implementing security measures. Your primary responsibility will be to analyze and assess supplier risk, discussing mitigations with both the supplier and internal stakeholders. Key Responsibilities: - Own supplier cybersecurity assessments from start to finish, which includes tasks such as information gathering, risk identification, communicating risks to stakeholders, and advising on mitigation controls. - Collaborate closely with internal business stakeholders, team members, and third-party contacts. - Review legal contracts with suppliers to ensure security clauses align with the desired requirements. - Interact directly with vendors to gain an understanding of their security controls and negotiate mitigating controls. - Perform third-party risk assessments with minimum supervision. Qualifications Required: - Knowledge of Security Principles, Security Assessment and Analysis, Security Frameworks, and Standards such as ISO, SOC, NIST, or PCI DSS. - Strong consulting skills, including the ability to effectively communicate complex security concepts to non-technical stakeholders. Education: A bachelor's or master's degree in computer science, information technology, or a related field is preferred for this role. Relevant certifications such as Certified Information Systems Security Professional (CISSP) or Certified Ethical Hacker (CEH) may also be required or highly valued.,