Position Details
About this role
This role involves evaluating cybersecurity risks related to new technologies and third-party vendors within a state government context. The analyst will review attestations, assess controls, and support risk management programs.
Key Responsibilities
- Conduct security reviews for new technologies
- Review third-party attestations and certifications
- Support third-party risk management programs
- Utilize GRC platforms for risk documentation
- Assist in security waiver evaluations
Technical Overview
The position requires expertise in cybersecurity risk assessments, GRC platforms like Archer IRM, vendor security evaluations, and familiarity with standards such as SOC 2 and ISO 27001.
Ideal Candidate
The ideal candidate is a mid-level cybersecurity analyst with experience in third-party risk management, security assessments, and GRC platforms. They should have a strong understanding of security standards like SOC 2 and ISO 27001 and be capable of supporting statewide cybersecurity programs.
Must-Have Skills
Nice-to-Have Skills
Tools & Platforms
Required Skills
Hard Skills
Soft Skills
Industry & Role
Keywords for Your Resume
Deal Breakers
Lack of experience with GRC platforms, No experience in cybersecurity risk assessments, Unwillingness to work remotely in US Eastern or Central time zones
Get matched to jobs like this
Luna finds roles that fit your skills and career goals — no endless scrolling required.
Create a Free Profile