Cyber Security Analyst

Our client, a leader in the energy and utility sector, is seeking a Cyber Risk Analyst to join its Enterprise Security & Third-Party Risk Management team in Merrillville, IN!

**This is a 1-year W2 contract with benefits (contract-to-hire)**

This role is responsible for developing, maintaining, and executing the enterprise Cyber Assessments and Third-Party Risk Management (TPRM) program to minimize supply chain exposure. Partnering cross-functionally across IT, Supply Chain, and Compliance teams, you will evaluate supplier risk profiles and drive the adoption of enterprise GRC platforms.

Responsibilities:

• Execute end-to-end Third-Party Risk Management (TPRM) and Vendor Control Assessments, evaluating inherent risks and continuous risk profiles across critical suppliers.
• Manage and advance the adoption of the enterprise Archer GRC platform to maintain, track, and report on policy compliance, risk posture, and audit resolution.
• Partner cross-functionally with Supply Chain, IT, OT, and Cyber Compliance teams to embed cyber assessments directly into vendor onboarding and contract renewal processes.
• Review and evaluate third-party SOC 2 reports, third-party control assessments, and security documentation to identify security gaps and track exceptions.
• Develop and maintain operational metrics, dashboards, and reporting to communicate continuous monitoring results and risk profiles effectively to leadership.

Required Qualifications:

• 6 years of dedicated TPRM experience supporting cyber risk assessments, supplier evaluations, and vendor management programs.
• 6 years of hands-on experience evaluating Vendor Control Assessments, SOC 2 reports, and risk remediation plans.
• Demonstrated expertise utilizing Archer RSA GRC (or equivalent enterprise GRC tools) for risk management, workflow tracking, and compliance reporting.
• Strong working knowledge of cybersecurity frameworks, particularly NIST 800 CSF, along with awareness of industry-specific compliance standards (e.g., NERC CIP).
• Strong cross-functional communication and stakeholder management skills, with prior experience in the energy, gas, or electric utility industry considered a strong plus.

Motion Recruitment Partners is an Equal Opportunity Employer, including disability/vets. All applicants must be currently authorized to work on a full-time basis in the country for which they are applying, and no sponsorship is currently available. Employment is subject to the successful completion of a pre-employment screening. Accommodation will be provided in all parts of the hiring process as required under Motion Recruitment Employment Accommodation policy. Applicants need to make their needs known in advance.