Information Security Risk Analyst

Project overview

To Apply for this Job Click Here

IDR is seeking a Information Security Risk Analyst to join one of our top clients for a remote opportunity. In this role, you will support a large, mission-driven organization by evaluating third-party security controls and risk posture against recognized standards. You’ll collaborate with technical and business stakeholders to document findings, communicate gaps, and help ensure vendors meet security and privacy expectations. Candidates must be able to work EST hours.

• Perform third-party/vendor risk assessments using recognized security and privacy frameworks and a structured assessment methodology
• Conduct vendor interviews, review evidence, and validate control design and effectiveness
• Document and maintain key assessment artifacts such as system/data inventories, risk registries, and risk assessment reporting
• Summarize assessment progress, issues, and risk status for project stakeholders and leadership
• Partner with a lead analyst and cross-functional teams to drive assessment timelines and deliverables

Requirements

What’s in it for you?

Why IDR?

IDR is an equal opportunity employer. We provide reasonable accommodations for disabled employees and do not discriminate based on race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, veteran status, marital status, criminal history, or any other protected category under applicable federal, state, or local laws. We consider all qualified applicants, including those with criminal histories, in compliance with applicable Fair Chance laws.

To comply with civil rights laws, we invite applicants to voluntarily self-identify their race, ethnicity, gender, and veteran status. This information is confidential, optional, and will not affect your application. You may access this form here.

Pursuant to pay transparency laws, salary ranges and benefits will be disclosed where required by law. Compensation is based on factors such as experience, skills, and qualifications.

If you require a reasonable accommodation during the application or interview process, please contact Human Resources.

To Apply for this Job Click Here

• 3–5 years of experience supporting information security risk, third-party risk, governance/risk/compliance, or security assessment work
• Working knowledge of NIST risk and control assessment concepts (including NIST SP 800-53, SP 800-30, and SP 800-37)
• Experience conducting vendor interviews, evaluating control evidence, and communicating findings and remediation guidance
• Familiarity with the NIST Cybersecurity Framework (CSF) and NIST Privacy Framework, including mapping controls to framework outcomes
• Professional security certification such as CISSP, CISM, or comparable credential
• Competitive compensation package
• Full Benefits; Medical, Vision, Dental, and more!
• Opportunity to get in with an industry leading organization.
• 25+ Years of Proven Industry Experience in 5 major markets
• Employee Stock Ownership Program
• Dedicated Engagement Manager who is committed to you and your success.
• Medical, Dental, Vision, and Life Insurance
• ClearlyRated’s Best of Staffing® Client and Talent Award winner 13 years in a row.

Project details

• Start: flexible
• Remote: remote
• Location: Raleigh, North Carolina, US
• Rate: 55-65 EUR/h
• Languages: English