Cyber Risk & Compliance Analyst ensuring client compliance and cybersecurity governance. Collaborates across teams to manage RFPs, contracts, and third-party risk management processes.
Responsibilities
Review cybersecurity-related sections of client RFPs and security questionnaires.
Gather and align internal documentation to ensure accurate, consistent, and defensible responses.
Coordinate with subject matter experts to validate technical and compliance statements.
Ensure responses reflect current certifications, controls, and commitments.
Review contracts to identify cybersecurity, data protection, and compliance-related clauses.
Assess alignment between contractual obligations and existing security controls.
Escalate gaps or misalignments to Security and Legal for resolution.
Maintain traceability of contractual security commitments.
Coordinate internal stakeholders to complete vendor or client security questionnaires.
Track questionnaire status, deadlines, and follow-ups.
Ensure timely and structured responses.
Support evidence collection and documentation for third-party reviews.
Maintain organized repositories of policies, certifications, audit reports, and evidence.
Ensure documentation is up to date and reusable for future engagements.
Support audit preparation activities when required.
Contribute to process improvement initiatives within GRC.
Monitor RFP, contract, and TPRM workflow status.
Provide status updates to management.
Identify recurring issues or process bottlenecks.
Requirements
Bachelor’s degree in IT, telecommunications, computer science, information security, or related field.
With 2-5 years of experience in cybersecurity, risk management, audit or compliance.
Good communication skills
Strong knowledge of information security frameworks and standards (ISO 27001, NIST CSF, GDPR).
Exposure to RFP processes or client-facing compliance documentation is a plus.
Senior Manager in Regulatory Submission Compliance overseeing CMC documentation and submissions. Ensuring high - quality regulatory compliance for clinical and commercial activities in Biotech.
Director of Trade Compliance at Blue Origin providing leadership and oversight for trade compliance in aerospace. Driving compliance strategy while ensuring alignment with business objectives and international operations.
Senior Regulatory Affairs Specialist at PROCEPT BioRobotics focusing on regulatory strategy for medical devices. Lead regulatory submissions and support compliance in innovative surgical robotics.
Senior Regulatory Affairs Specialist ensuring compliance for medical device labeling, managing regulatory project activities. Collaborating across functions to support global regulatory submissions in a medical device company.
Risk and Compliance Officer providing guidance on regulatory obligations for Sharesies. Contributing to the risk and compliance program while addressing challenges in a dynamic environment.
Senior Manager in Ethics and Compliance at PwC focusing on compliance investigations and guidance. Collaborating with diverse teams while ensuring the firm's code of ethics is upheld.
Senior Regulatory Affairs Specialist managing regulatory submissions and compliance for medical devices in the healthcare industry. Collaborating with cross - functional teams on product development and lifecycle management.
Senior compliance professional managing Credit Risk and Fair Lending oversight at PayPal. Leading risk assessment projects and collaborating across teams to ensure compliance and responsible lending practices.
Senior Associate advising U.S. and multinational companies on regulatory frameworks governing global trade. Focus on national security, export controls, and foreign investment regulation.
Analyst responsible for fiscal compliance processes for transportation solutions in Mexico. Ensuring timely document collection and compliance with SAT requirements while collaborating with internal teams.