Job Description
Our client, a leader in the energy and utility sector, is seeking a Cyber Risk Analyst to join its Enterprise Security & Third-Party Risk Management team in Merrillville, IN!
\n
\n
**This is a 1-year W2 contract with benefits (contract-to-hire)**
\n
\n
This role is responsible for developing, maintaining, and executing the enterprise Cyber Assessments and Third-Party Risk Management (TPRM) program to minimize supply chain exposure. Partnering cross-functionally across IT, Supply Chain, and Compliance teams, you will evaluate supplier risk profiles and drive the adoption of enterprise GRC platforms.
\n
\n
Responsibilities:
\n
- \n
- Execute end-to-end Third-Party Risk Management (TPRM) and Vendor Control Assessments, evaluating inherent risks and continuous risk profiles across critical suppliers.
- Manage and advance the adoption of the enterprise Archer GRC platform to maintain, track, and report on policy compliance, risk posture, and audit resolution.
- Partner cross-functionally with Supply Chain, IT, OT, and Cyber Compliance teams to embed cyber assessments directly into vendor onboarding and contract renewal processes.
- Review and evaluate third-party SOC 2 reports, third-party control assessments, and security documentation to identify security gaps and track exceptions.
- Develop and maintain operational metrics, dashboards, and reporting to communicate continuous monitoring results and risk profiles effectively to leadership.
\n
\n
\n
\n
\n
\n
\n
Required Qualifications:
\n
- \n
- 6+ years of dedicated TPRM experience supporting cyber risk assessments, supplier evaluations, and vendor management programs.
- 6+ years of hands-on experience evaluating Vendor Control Assessments, SOC 2 reports, and risk remediation plans.
- Demonstrated expertise utilizing Archer RSA GRC (or equivalent enterprise GRC tools) for risk management, workflow tracking, and compliance reporting.
- Strong working knowledge of cybersecurity frameworks, particularly NIST 800 CSF, along with awareness of industry-specific compliance standards (e.g., NERC CIP).
- Strong cross-functional communication and stakeholder management skills, with prior experience in the energy, gas, or electric utility industry considered a strong plus.
\n
\n
\n
\n
\n
\n
\n
Motion Recruitment Partners is an Equal Opportunity Employer, including disability/vets. All applicants must be currently authorized to work on a full-time basis in the country for which they are applying, and no sponsorship is currently available. Employment is subject to the successful completion of a pre-employment screening. Accommodation will be provided in all parts of the hiring process as required under Motion Recruitment Employment Accommodation policy. Applicants need to make their needs known in advance.