Vendor Security Management Analyst

Vendor Security Management Analyst

We are seeking an experienced Vendor Security Management Analyst to support enterprise-wide third-party vendor security assessments, secure vendor onboarding, firewall management, and network security operations. The ideal candidate will have hands-on experience with Information Risk Questionnaires (IRQ), vendor risk assessments, Qualys vulnerability scanning, Palo Alto/Cisco ASA/Fortinet firewall administration, and network troubleshooting.

This role requires close collaboration with Product, Engineering, Procurement, Legal, Business, and Security teams to ensure secure vendor connectivity, regulatory compliance, and adherence to enterprise security standards.

• 8–10 Years of experience in Vendor Security Management, Network Security, or Information Security.
• Hands-on production experience with firewall administration and vendor onboarding.
• Experience supporting enterprise third-party vendor risk management.

• Manage end-to-end vendor onboarding through the Information Risk Questionnaire (IRQ) process.
• Conduct third-party vendor security assessments and risk evaluations.
• Ensure secure vendor connectivity across enterprise and third-party environments.
• Coordinate with Legal, Procurement, Product, and Engineering teams throughout vendor onboarding.

• Implement and review firewall rules using:
  Palo Alto Networks, Cisco ASA, Fortinet.
• Apply least-privilege access principles for vendor connectivity.
• Troubleshoot VPN, connectivity, provisioning, and network access issues.
• Support secure remote access and third-party integrations.

• Perform vulnerability scans using Qualys.
• Analyze scan results and coordinate remediation activities.
• Track security findings through closure.
• Ensure compliance with enterprise security policies.

• Investigate network provisioning issues.
• Support Disaster Recovery (DR) readiness activities.
• Maintain security documentation and tracking reports.
• Assist in vendor security audits and compliance reviews.

• Partner with Product, Engineering, Procurement, Legal, and Business teams.
• Maintain vendor security records and operational dashboards.
• Support contract, purchase order (PO), and vendor documentation processes.
• Communicate security risks and mitigation plans to stakeholders.

• Vendor Security Management
• Third-Party Risk Management
• Information Risk Questionnaire (IRQ)
• Vendor Risk Assessment
• Vendor Onboarding
• Security Compliance

• Palo Alto Firewalls
• Cisco ASA
• Fortinet
• Firewall Rule Management
• Network Security
• VPN
• Network Troubleshooting
• Secure Connectivity

• Qualys
• Vulnerability Assessment
• Vulnerability Scanning
• Risk Remediation

• Disaster Recovery (DR)
• Access Management
• Incident Coordination
• Security Governance

• Qualys
• Palo Alto
• Cisco ASA
• Fortinet
• Tableau
• Excel
• Wrike
• Slack
• Web Ex
• BOX
• Halo
• Quip
• Claude AI

• Third-Party Risk Management (TPRM)
• Vendor Governance
• Security Audits
• Access Management
• Identity & Access Management (IAM)
• Security Policies
• Compliance Frameworks
• Network Infrastructure
• Cloud Security