Sr Data Analyst Third Party Risk

Our Mission

Our mission is to SAVE AND IMPROVE LIVES BY EMPOWERING HEALTHCARE CONSUMERS. Come be part of remarkable.

How you can make a difference

We're looking for a highly motivated and analytical Sr Third Party Risk Security Data Analyst to join our team. You'll play a crucial part in assessing, monitoring, and reporting on cybersecurity risks, directly contributing to our organization's overall supply chain security posture. This new role is responsible for collecting and interpreting cybersecurity data to develop performance reports, dashboards, and key metrics (KRIs/KPIs) for stakeholders.

This role is responsible for assessing the security program's maturity against frameworks like NIST CSF and ensuring compliance objectives are met. This role requires strong analytical skills and the ability to clearly visualize and communicate cybersecurity risks and mitigation strategies to leadership.

What you’ll be doing

• Assist in the collection, analysis, and interpretation of data for cybersecurity risk assessments, helping us to surface emerging risks by creating meaningful performance reports.
• Develop, track, and report on key risk indicators (KRIs) and key performance indicators (KPIs) to monitor the effectiveness of our operations partner’s security controls and risk mitigation efforts.
• Create and maintain compelling dashboards, reports, and presentations using tools (e.g., Power BI, Tableau, DOMO) and Microsoft Office Suite (Excel, PowerPoint) to clearly visualize and communicate trends and emerging risks to various stakeholders.
• Design new performance reports that demonstrate we’re meeting pre-established compliance objectives.
• Support the assessment of our cybersecurity program's maturity against established industry frameworks, particularly NIST Cybersecurity Framework (CSF), and help us map current security controls and practices to relevant security standards (e.g., CIS Controls).
• Contribute to the thorough documentation of risk findings, mitigation strategies, and security policies and procedures.
• Participate in discussions around risk treatment plans, offering sound quantitative data when proposing reasonable and effective solutions.
• Stay informed about the latest cybersecurity threats, vulnerabilities, and industry’s best practices.

What you will need to be successful

• Bachelor’s degree in mathematics, Finance, Accounting, a similar quantitative discipline or equivalent experience.
• 5+ years of experience in cybersecurity, IT risk, data analysis, or a related quantitative role, which could include internships or significant academic projects.
• Deep familiarity with generative AI resources and tools, such as Microsoft Copilot, Meta AI, Gemini and ChatGPT.
• Ability to work with large blocks of unstructured or semi-structured data to match and compare similar datasets.
• Mastery of spreadsheet capabilities such as Pivot Tables, vLookups, Trim, Truncate, Join, etc.
• Understanding of cybersecurity program maturity models and how they depict stages of progression within a security program.
• Familiarity with leading and lagging key risk indicators (KRIs) and key performance indicators (KPIs) within a technical or business context.
• Proficiency with data analysis and visualization tools, specifically Microsoft Power BI and the Microsoft Office Suite (Excel, PowerPoint, Word).
• Familiarity with common cybersecurity frameworks, particularly the NIST Cybersecurity Framework (CSF), and a basic understanding of similar security frameworks (e.g., ISO 27001, CIS Controls).
• Foundational understanding of core cybersecurity concepts including common threats, vulnerabilities, types of security controls, network fundamentals, and operating systems.
• Ability to work independently, manage multiple tasks, and prioritize effectively in a dynamic environment.
• Solid quantitative judgment and intuition when assessing risks and proposing reasonable solution sets.
• Strong verbal and written communication skills, with the ability to articulate complex technical and risk information clearly to both technical and non-technical audiences.
• Eagerness to learn, adapt, and grow within the cybersecurity risk management domain.
• Cybersecurity: CISM,…