assessments, evaluates vendor security posture, and oversees mitigation strategies for information security risks. This role partners with IT, business units, Legal, and Sourcing to ensure security, compliance, and effective risk management across the organization.

Responsibilities include conducting ongoing security assessments, reviewing vendor reports, validating remediation evidence, improving TPRM processes, advising on contracts, and identifying emerging threats.

The analyst also leads cross-functional teams, provides subject-matter expertise, and supports enterprise security and risk initiatives.

Qualifications

6+ years in risk management and 7+ years in IT audit/security; strong knowledge of security frameworks (HIPAA, NIST), GRC tools, and multiple security domains (IAM, cloud, network, vulnerability management, BC/DR, etc.). CISSP, CISA, or CRISC preferred. Excellent communication, analytical skills, and ability to mentor junior staff required.

30:T780,{"@context":"https://schema.org","@type":"JobPosting","title":"Principal Cybersecurity Risk Analyst","description":"

Principal Cybersecurity Risk Analyst

12 Months contract - Later hire

Location : @ Newark , NJ Hybrid model

The Principal Cybersecurity Risk Analyst leads third-party, project, and technology risk assessments, evaluates vendor security posture, and oversees mitigation strategies for information security risks. This role partners with IT, business units, Legal, and Sourcing to ensure security, compliance, and effective risk management across the organization.
Responsibilities include conducting ongoing security assessments, reviewing vendor reports, validating remediation evidence, improving TPRM processes, advising on contracts, and identifying emerging threats.
The analyst also leads cross-functional teams, provides subject-matter expertise, and supports enterprise security and risk initiatives.

Qualifications

6+ years in

Principal Cybersecurity Risk Analyst

Job Type