Jobs
>
Saint Paul

    Vendor Risk Analyst - Saint Paul, United States - DivIHN Integration Inc

    Default job background
    Technology / Internet
    Description

    DivIHN (pronounced "divine") is a CMMI ML3-certified Technology and Talent solutions firm. Driven by a unique Purpose, Culture, and Value Delivery Model, we enable meaningful connections between talented professionals and forward-thinking organizations. Since our formation in 2002, organizations across commercial and public sectors have been trusting us to help build their teams with exceptional temporary and permanent talent.

    Visit us at

    to learn more and view our open positions.

    Please apply or call one of us to learn more


    For further inquiries regarding the following opportunity, please contact our Talent Specialists

    Meghna |

    Sivanesan|

    Title: Vendor Risk Analyst
    Location: St. Paul, MN
    Duration: 7 Months (Possibility of extension )

    Description:

    Top must-have skills or keywords - demonstrated exp in archer tool, and vendor risk management

    • This is a non-exempt role.
    • The Cybersecurity Sr. Specialist supports cybersecurity operations by designing, developing or recommending secure technical solutions, including policy, standards, applications, systems, architectures, and infrastructure that are operationally viable and efficient.
    • Ensure appropriate application of security products and technologies to protect the organization's systems and information and enable the achievement of the organization's objectives.
    • Manage and design innovative integration of cybersecurity toolsets to enable more automated discovery, remediation, and alerting of network and device vulnerabilities, as a means of improving the security posture.
    • Perform analysis of emerging technologies and design and build architectures and solutions to enable secure implementation of new technologies.

    Duties:

    • Develop a risk-based cyber security program that meets regulatory requirements and aligns with industry-leading information security practices.
    • Perform threat identification and mitigation activities using industry-leading security controls and tool sets.
    • Advance the company's cyber threat and vulnerability management program to ensure consistent identification, analysis, response, and monitoring of cyber security threats, events, and vulnerabilities.
    • Assess threats to the business and deploy countermeasures for those threats.
    • Collaborate with business units, application development teams, and third-party vendors to achieve program requirements while enabling the business.
    • Apply technical knowledge to protect the Company against cyber threats (e.g., knowledge of firewalls, intrusion detection and prevention systems, data loss prevention solutions, endpoint protections, log aggregation technology and other leading-edge security technologies).
    • Facilitate cross-team coordination to achieve defined security goals as well as meet technical requirements in support of detailed implementation plans for security projects.
    • Manage security projects to ensure the timely, on-budget, and effective implementation of cyber security improvements that are operationally supported with validation methods in place to measure effectiveness.
    • Perform assessment of cyber security incidents to identify the root cause, respond, and recover the environment.
    • Develop strategies, policies and standards to protect company information and technology assets.
    • Manage capital and operational expense budgets to ensure accurate forecasting and administration.
    • Demonstrated experience with the Archer GRC tool.

    Required:

    • At least 5 years of experience but typically 7 plus years of experience is required.
    • Possess expertise in valuing and implementing industry standards such as the ISO 27001/2, SOC 2, HITRUST and FedRAMP Information Security standard and the ISO 22301 Business Continuity Standard.
    • Experience with implementation and operational use of GRC toolsets (Governance Risk and Compliance).
    • Possess CISSP certification (or similar) and be knowledge of national and international regulatory compliances and frameworks such as ISO, SOX, BASEL II, EU DPD, HIPAA, and PCI DSS.

    Experience:

    • Looking for a risk management specialist who specializes in demonstrated vendor risk management, can review what the risk is, has experience with third-party suppliers for cyber security control, GRC tools (even 1 year) to drive the assessments, vendor risk management in corporate America, can work in a fast-paced environment, good communication skills, they will be interfacing people across the globe.
    • Education- no degree is preferred, HS is also okay with demonstrated experience. (Equivalent experience.)
    • Demonstrated experience is required a minimum of 3 years max 10 years
    • Flexibility in onsite and remote, but currently want candidates to work onsite.
    • Local candidates preferred
    • Hiring process- 1 interview with Manager only (could be remote or onsite- flexible)
    • Certifications- could be preferred but not required.
    • The Sr. Specialist IT Quality resource is a member of the team that evaluates and monitors third-party risks.
    • Experience: 2-3 years of demonstrated experience using the Archer GRC tool
    • 2-3 years of demonstrated experience completing and managing vendor risk management assessments.
    • Day to day - Risk management, assessing suppliers to meet Cybersecurity standards, reviewing supplier controls, vendor analysis, and general external risk among others.

    Skills

    • Demonstrated experience in vendor risk using Archer, Evaluating vendor risk, good communication, strong analytical skills, an ability to work independently.

    About us:

    DivIHN, the 'IT Asset Performance Services' organization, provides Professional Consulting, Custom Projects, and Professional Resource Augmentation services to clients in the Mid-West and beyond. The strategic characteristics of the organization are Standardization, Specialization, and Collaboration.

    DivIHN is an equal opportunity employer. DivIHN does not and shall not discriminate against any employee or qualified applicant on the basis of race, color, religion (creed), gender, gender expression, age, national origin (ancestry), disability, marital status, sexual orientation, or military status.


  • Collabera

    Risk Analyst

    4 days ago


    Collabera Minneapolis, United States

    Job Title: Risk Analyst · Location: Minneapolis, MN 55420 · Duration: Contract (6 months contract with possible extensions) · Desription: · Risk/Reconciliation Management Experience · Accounting/Finance experience · Knowledge working/analyzing Scripts · Comparing test scripts wit ...

  • Collabera

    Risk Analyst

    5 days ago


    Collabera Minneapolis, United States

    Job Description · Job Title: Risk Analyst Consultant · Location: Minneapolis, MN- Hybrid · Duration: 6 months (higher possibility of extension) · MISSION: · Backfill for previous Risk Analytics Consultant. Team is in middle of virtual desktop product updates "Sim Core upgrade". N ...

  • Amazon Services

    Risk Analyst

    1 week ago


    Amazon Services Minneapolis, United States

    Its no secret that Amazon relies on its technology to deliver millions of packages every day to its customers on time, with low cost. The Middle Mile Transportation Technology organization, builds complex software solutions that work across our vendors, warehouses and carriers to ...

  • Amazon Services

    Risk Analyst

    2 weeks ago


    Amazon Services Minneapolis, United States

    It's no secret that Amazon relies on its technology to deliver millions of packages every day to its customers – on time, with low cost. The Middle Mile Transportation Technology organization, builds complex software solutions that work across our vendors, warehouses and carriers ...

  • Aon

    Risk Analyst

    1 week ago


    Aon Minneapolis, United States

    Posting Description: · Aon is looking for a Compliance Risk Analyst · As part of an industry-leading team, you will help empower results for our clients by delivering innovative and effective solutions supporting Global Risk Consulting in Bloomington, MN. · Work style: Hybrid ...

  • Amazon Services

    Risk Analyst

    15 hours ago


    Amazon Services Minneapolis, United States

    Job ID: | Services LLC · It's no secret that Amazon relies on its technology to deliver millions of packages every day to its customers – on time, with low cost. The Middle Mile Transportation Technology organization, builds complex software solutions that work across our vendor ...

  • Aon

    Risk Analyst

    5 days ago


    Aon Minneapolis, United States

    Aon is looking for a Compliance Risk Analyst · As part of an industry-leading team, you will help empower results for our clients by delivering innovative and effective solutions supporting Global Risk Consulting in Bloomington, MN. · Work style: Hybrid - in office as needed up ...


  • 3M Group Maplewood, United States

    Insurance Risk Management Analyst page is loaded · Insurance Risk Management Analyst · Solicitar · remote type · Hybrid · locations · US, Minnesota, Maplewood · time type · Full time · posted on · Publicado hace 2 días · job requisition id · R · Descripción del traba ...

  • Aon

    Risk Analyst

    1 week ago


    Aon Bloomington, United States

    Aon is looking for a Compliance Risk Analyst · As part of an industry-leading team, you will help empower results for our clients by delivering innovative and effective solutions supporting Global Risk Consulting in Bloomington, MN. · Work style: Hybrid - in office as needed u ...

  • DataSite

    Sr. Risk Analyst

    1 week ago


    DataSite Minneapolis, United States

    Datasite is where deals are made. We provide the data rooms and SaaS technology used in M&A and other high-value transactions, to deliver projects in more than 170 countries. Carrying that success into the future is all about you. Your useful skills, your unusual experience, your ...

  • U.S. Bank

    Credit Risk Analyst

    15 hours ago


    U.S. Bank Minneapolis, United States

    At U.S. Bank, we're on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed. We believe it takes all of us to bring our shared ambition to life, and each ...


  • KellyMitchell Group Minneapolis, United States

    Job Summary: · Our client is seeking a Governance Risk Analyst who will report to the Governance Director and be responsible for supporting the Information Technology and Cyber Security organizations in matters related to audit, compliance, and the remediation of risk. This role ...

  • DataSite

    Sr. Risk Analyst

    6 days ago


    DataSite Minneapolis, United States

    Datasite is where deals are made. We provide the data rooms and SaaS technology used in M&A and other high-value transactions, to deliver projects in more than 170 countries. Carrying that success into the future is all about you. Your useful skills, your unusual experience, your ...

  • U.S. Bank

    Credit Risk Analyst

    1 week ago


    U.S. Bank Minneapolis, United States

    At U.S. Bank, we're on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed. We believe it takes all of us to bring our shared ambition to life, and each ...


  • ECMC Group Minneapolis, United States

    Choosing a career with ECMC Group means joining a nonprofit corporation with a mission to help students succeed. With a vibrant mission and values, great benefits, and strong community involvement, ECMC Group companies are an ideal team to join. · Job Summary · Responsible for ...


  • Datascan Technologies, LLC Minneapolis, MN, United States

    Offering $10K Sign On Bonus · Position: Field Risk Specialist - This is a Field Based Position so you will not be assigned to a local office, candidates must be located in the Minneapolis, MN area. · ABOUT DATASCAN · Headquartered in Alpharetta, Georgia, DataScan stands at the ...


  • Datascan Technologies, LLC Minneapolis, MN, United States Full time

    Offering $10K Sign On Bonus · Position: Field Risk Specialist - This is a Field Based Position so you will not be assigned to a local office, candidates must be located in the Minneapolis, MN area. · ABOUT DATASCAN · Headquartered in Alpharetta, Georgia, DataScan stands at the ...


  • C4 Technical Services Minneapolis, United States

    Cybersecurity Lead (Developer) · Location: Remote · Job Description: · Responsible for managing merger, acquisition, divestiture, and spin-off related cybersecurity activities. Focus will be automated the assessment process (no coding for this role but must be well versed in deve ...


  • ECMC Shared Services Company, LLC Minneapolis, United States Full time

    Choosing a career with ECMC Group means joining a nonprofit corporation with a mission to help students succeed. With a vibrant mission and values, great benefits, and strong community involvement, ECMC Group companies are an ideal team to join. · Job Summary · Responsible for p ...


  • ECMC Group Minneapolis, United States Regular, Full time

    Choosing a career with ECMC Group means joining a nonprofit corporation with a mission to help students succeed. With a vibrant mission and values, great benefits, and strong community involvement, ECMC Group companies are an ideal team to join. · Job Summary · Responsible for pl ...