Analyst, Third Party Security

Kennett Square, PA

Full-time

Hybrid

$77K/yr - $86K/yr

Entry, Mid Level

Constellation is the nation's largest producer of clean, carbon-free energy, dedicated to accelerating the transition to a carbon-free future. The Analyst, Third Party Security role involves managing vendor security risk assessments, monitoring vendor performance, and collaborating with internal stakeholders to enhance security measures and mitigate risks.

Apply Now

Responsibilities

Responsible for the day-to-day execution, maintenance, and results communication of the vendor Security Risk Assessment (SRA) and related processes/procedures (risk review, analysis, follow-up, meeting participation, etc.) to assess risk from a third party security risk management perspective
Responsible for monitoring a vendor’s SRA from start to finish. (escalating, tracking)
Recommend vendor risk exposures to be accurately measured, documented, and reported, escalating issues to the relevant internal team members to develop an appropriate remediation plan (if applicable)
Assist with generation and tracking of relevant vendor SRA metrics/KPIs including but not limited to: Actual Time to Complete, SRAs Completed Year-to-Date
Assist with Constellation-as-a-Vendor inbound security assessment requests
Interact with internal business stakeholders to define, execute, and deliver appropriate analysis
Update job aids to accommodate changes and test prior to implementation to ensure quality messaging
Process ad hoc requests for reporting and analysis
Scope - Interact with internal stakeholders to deliver risk analyses and perform related tasks
Work under limited supervision, following standard procedures to accomplish assigned tasks
Drive and execute relevant vendor security questionnaire activities
Provide necessary data to properly report and track vendor SRA and vendor remediation requirement metrics
Assist with compliance, ad-hoc reporting, operations, and metrics tasks as needed

Qualification

Required

Bachelor's degree in related field discipline and typically 2-5 years' experience in security or related technical field or equivalent combination of education and work experience.
Strong communication skills, both written and oral
Knowledge of PC/desktop workstation applications: Microsoft Teams, Word, Excel, Outlook, PowerPoint
Knowledge of security concepts, terminology, and tools
Technical knowledge of databases, database queries, and database reporting

Preferred

Strong analytical and problem-solving skills with the ability to analyze data, identify opportunities, determine solutions, identify and obtaining needed resources, and execute to completion
Familiarity with third-party management tools
Familiarity with standardized third-party security assessments such as SIG/SIG Lite
Familiarity with risk quantification standards such as FAIR
Background in third party/vendor management and governance, procurement, or regulatory compliance
Certification: Security+, SANS, and other related technical certifications

Benefits

Competitive compensation and benefits that support both employees and their families
Bonus program
401(k) with company match
Employee stock purchase program
Comprehensive medical, dental and vision benefits
Robust wellness program
Paid time off for vacation, holidays, and sick days

Constellation Energy Corporation (Nasdaq: CEG), a Fortune 200 company headquartered in Baltimore, is the nation’s largest producer of reliable, emissions-free energy and a leading energy supplier to businesses, homes and public sector customers nationwide, including three-fourths of Fortune 100 companies.

Glassdoor

3.8

Founded in 1999

Baltimore, Maryland, USA

10001+ employees

https://www.constellationenergy.com/