Cyber Security Analyst 3

We are looking for a highly skilled Cyber Security Analyst to join our team on a long-term contract basis. This position involves assessing and mitigating cybersecurity risks linked to technologies, proposed solutions, and vendor partnerships. You will play a key role in reviewing security frameworks, ensuring compliance, and enhancing third-party risk management processes. The role is fully remote but limited to candidates residing in Eastern and Central time zones., * Conduct thorough evaluations of new technologies, applications, cloud services, and solutions to identify potential security risks.

• Analyze architectural designs and validate the implementation of security controls and data protection measures.
• Perform structured risk assessments to support statewide procurement decisions and ensure compliance with security standards.
• Review and interpret vendor security documentation, including certifications, penetration test results, and compliance reports.
• Assist in developing and improving the State’s Third-Party Risk Management program, including the use of monitoring tools and platforms.
• Evaluate cybersecurity waiver submissions requiring detailed technical analysis to determine their validity.
• Maintain the statewide risk register, tracking risks and ensuring remediation plans align with risk tolerance levels.
• Collaborate with stakeholders to implement best practices for security governance and compliance.
• Provide recommendations and documentation to support policy development and process improvements.
• Work closely with vendors and other partners to ensure alignment with security requirements and standards.

• Strong knowledge of cybersecurity principles, control frameworks, and best practices.
• Experience interpreting compliance reports, certifications, and security assessments such as SOC 2 Type II, ISO 27001, and penetration tests.
• Proven ability to perform risk assessments and identify compensating controls for vendor or technology risks.
• Familiarity with Third-Party Risk Management programs and tools, such as Black Kite or similar platforms.
• Understanding of Governance, Risk, and Compliance systems, including platforms like Archer.
• Ability to collaborate effectively with stakeholders and vendors to address security concerns.
• Experience working with local, state, or federal government agencies is preferred.
• Strong documentation and reporting skills to support security policy development and implementation.

Robert Half is the world’s first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles.