Analyst, Vendor Risk Management

• Location: Hybrid In Washington, DC Metro Area
• United States Citizenship Required

• Participate in third-party risk management consulting engagements as part of BlueVoyant’s Supply Chain Defense business
• Support Third Party Risk Workshops at BlueVoyant Clients focused on the following topics:
  • Vendor Identification and Stratification
  • Vendor On-boarding, Monitoring and Remediation
  • Cybersecurity Risk Questionnaire Development
• Project and program delivery, including project and process management, reporting, engagement in senior leadership meetings, drafting and reviewing materials for senior management and other governance activities
• Communicate findings and recommendations to client stakeholders, best practices, tools and technology
• Mature standard operating procedures for customers to optimize utilization of BlueVoyant’s offerings
• Enable business development in renewal, cross-sell, and up-sell opportunities of BlueVoyant offerings while maintaining client trust
• Create repeatable processes and frameworks portable across clients and industries to accelerate future Third-Party Risk Cybersecurity Risk Management implementations
• Work 1-2 Days per week from Washington, DC area office
• Travel to clients as requested

• CISSP or similar preferred.
• Familiarity with encryption fundamentals and network design required.
• 2+ years of Third-Party Risk Management consulting (including vendor cybersecurity risk) at a Big 4 consulting firm or vendor risk management company
• 3+ years leading an enterprise risk management program, including Third-Party Risk, Internal Risk Maturity and Assessment, Risk Consolidation, and Risk Reporting
• Information security/cybersecurity accreditation and background
• Experience working in a cybersecurity or technology organization
• Entrepreneurial nature and drive for results
• Clear communication and writing skills
• Ability to conduct deep client discovery to uncover root cause problems and build trusted relationships
• Ability to design programs and solutions with minimal guidance and oversight

BlueVoyant Candidate Privacy Notice

To understand how we secure and manage your personal data upon submitting a job application, please see our Candidate Privacy Notice, which can be found here - Candidate Privacy Notice