Vendor Risk Analyst

About Security Scorecard

Security Scorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Alex Yampolskiy and Sam Kassoumeh and funded by world-class investors, Security Scorecard’s patented rating technology is used by over 25,000 organizations for self-monitoring, third-party risk management, board reporting, and cyber insurance underwriting;

making all organizations more resilient by allowing them to easily find and fix cybersecurity risks across their digital footprint.

Headquartered in New York City, our culture has been recognized by Inc Magazine as a “Best Workplace,” by Crain’s NY as a “Best Places to Work in NYC,” and as one of the 10 hottest SaaS startups in New York for two years in a row. Most recently, Security Scorecard was named to Fast Company’s annual list of the World’s Most Innovative Companies for 2023 and to the Achievers 50 Most Engaged Workplaces in 2023 award recognizing “forward-thinking employers for their unwavering commitment to employee engagement.”

Security Scorecard is proud to be funded by world-class investors including Silver Lake Waterman, Moody’s, Sequoia Capital, GV and Riverwood Capital.

Security Scorecard’s MAX team delivers vendor risk management services on behalf of customers and in support of our delivery partners. Our MAX team is growing and we are seeking a Vendor Risk Analyst to join our team and help us manage and mitigate risks associated with our customers’ vendors.

We are looking for someone who is organized and self-motivated, an outstanding communicator with an eye for fine detail. They will work alongside some of the largest companies in the world and make a significant impact on their business by ensuring that their information is held securely by their vendors.

• Assess new cybersecurity findings identified by Security Scorecard, and provide analysis and insight to customers on how these impact their vendors and how vendors should mitigate and remediate these findings.
• Provide accurate and insightful written and verbal reports to customers and vendors on vendor risks, and offer advice to vendors on how to improve their cybersecurity posture.
• Address support tickets for questions and issues raised by vendors and customers regarding the MAX service.
• Stay informed about current security threats and industry standards to continuously improve vendor risk management strategies.

• 1+ year(s) of experience directly interacting with and advising customers on cybersecurity or technology issues.
• An understanding of cybersecurity concepts, technologies, and best practices.
• Data analysis skills, using Microsoft Excel or similar, and common scripting languages, such as Python, to analyze complex data and spot trends and patterns.
• Outstanding verbal and written communication skills, and the ability to explain complex cybersecurity and vendor risk management concepts to non-technical audiences.
• Demonstrated ability to manage multiple client accounts simultaneously, prioritize tasks, and meet deadlines.
• The ability to work independently and collaboratively in a fast-paced, dynamic environment.

Specific to each country, we offer a competitive salary, stock options, Health benefits, and unlimited PTO, parental leave, tuition reimbursements, and much more!

The estimated total compensation range for this position is $70,000 - $90,000 (base plus bonus). Actual compensation for the position is based on a variety of factors, including, but not limited to affordability, skills, qualifications and experience, and may vary from the range. In addition to base salary, employees may also be eligible for annual performance-based incentive compensation awards and equity, among other company benefits.

Security Scorecard is committed to Equal Employment Opportunity and embraces diversity. We believe that our team is strengthened through hiring and retaining employees with diverse backgrounds, skill sets, ideas, and perspectives. We make hiring decisions based on merit and do not discriminate based on…