Cyber Risk Analyst (W2 Contract only/ No 3rd Parties)

Role: Cyber Risk Analyst

Location: Columbus, OH / Merrillville, IN (Hybrid - Must report onsite 3 days a week)

Duration: 12 Months

Pay Rate: $50/hr on W2

Brief Job Description

We are seeking an experienced Cyber Risk Analyst with a strong background in Third-Party Risk Management (TPRM), Vendor Risk Assessments, and Cybersecurity Governance, Risk & Compliance (GRC). The candidate will support and enhance the Cyber Assessments program by conducting vendor security reviews, evaluating supplier risk profiles, tracking remediation activities, and leveraging GRC platforms such as RSA Archer.

The ideal candidate will collaborate with IT, Cyber Security, Supply Chain, Compliance, and Audit teams to assess third-party cyber risks, analyze SOC reports, maintain risk metrics and dashboards, and ensure vendor onboarding and renewal processes align with cybersecurity requirements.

Required Skills

• 6+ years of experience in Third-Party Risk Management (TPRM).
• Experience performing Vendor Control Assessments and reviewing SOC 2 reports.
• Strong understanding of NIST Cybersecurity Framework (NIST CSF).
• Hands-on experience with risk reporting, metrics, dashboards, and compliance tracking.
• Experience with RSA Archer GRC or similar GRC platforms.
• Strong analytical, communication, and stakeholder management skills.
• Proficiency with MS Office 365 (Excel, Word, SharePoint).