Risk Analyst - Vendor Risk and Compliance at OnePyramid Consulting Limited

OnePyramid Consulting Limited is a Nigerian Technology firm with goals of providing a blend of unique and cost-effective technology products and services that aid the efficiency of Nigerian businesses and helping them achieve their objectives. At the heart of our philosophy is to remain agile and dynamic, thereby providing quick time-to-value for our clients.

We are recruiting to fill the position below:

Job Title: Risk Analyst - Vendor Risk and Compliance

Location: Lagos
Employment Type: Full Time

Position Overview

• We are seeking to hire a talented Risk Analysts with expertise in IT, Supply Chain, or Cybersecurity to join our team.
• The ideal candidate will be responsible for assessing vendor risk and compliance with security standards, ensuring alignment with organizational objectives and regulatory requirements.
• The candidate will play a critical role in identifying, analyzing, and mitigating risks associated with vendor relationships, contributing to the overall security and resilience of our organization.

Responsibilities

• Conduct comprehensive assessments of vendor risk and compliance with security standards, including evaluation of security controls, policies, and procedures.
• Collaborate with cross-functional stakeholders to define risk assessment criteria, methodologies, and scoring frameworks, ensuring consistency and accuracy in risk analysis.
• Evaluate vendor contracts, agreements, and service level agreements (SLAs) to identify security requirements and compliance obligations.
• Analyze vendor security documentation, such as security questionnaires, assessments, and audit reports, to assess the adequacy and effectiveness of security measures.
• Identify gaps, vulnerabilities, and areas of non-compliance with security standards, and develop risk mitigation strategies and remediation plans.
• Communicate findings and recommendations to key stakeholders, including senior management, procurement teams, and vendor management offices.
• Monitor and track vendor risk remediation activities, ensuring timely resolution of identified issues and compliance gaps.
• Stay abreast of industry trends, regulatory changes, and emerging threats in IT security and supply chain risk management, and provide insights and recommendations to enhance organizational resilience.

Requirements

• Bachelor's Degree in Information Technology, Computer Science, Business Administration, or related field. Master's degree preferred.
• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent certification preferred.
• Minimum of 4+ years of experience in risk management or vendor management roles, with a focus on IT security, supply chain, or cybersecurity.
• Strong understanding of security frameworks and standards, such as ISO 27001, NIST Cybersecurity Framework, and GDPR.
• Experience conducting risk assessments, security audits, and compliance reviews for vendors and third-party service providers.
• Proficiency in risk assessment tools and methodologies, such as risk matrices, heat maps, and risk scoring models.
• Excellent communication and interpersonal skills, with the ability to effectively engage and influence stakeholders at all levels of the organization.
• Strong analytical and problem-solving abilities, with a demonstrated track record of identifying and mitigating security risks and compliance issues.

Tools and Technologies:

• Risk Assessment Tools (e.g., RSA Archer, OneTrust, etc.)
• Vendor Risk Management Platforms (e.g., BitSight, RiskRecon, etc.)
• Security Questionnaire Tools (e.g., Shared Assessments, SIG Questionnaire, etc.)
• Document Management Systems (e.g., SharePoint, Confluence, etc.)
• Microsoft Office Suite (Word, Excel, PowerPoint, Outlook.

Application Closing Date
Not Specified.