Vendor Risk Management Analyst Job in Pune at Avalara

Avalara is hiring for the role of Vendor Risk Management Analyst!

Responsibilities of the Candidate: 

• Supporting in analyzing due diligence results and conducting periodic monitoring.
• Assisting in the application of project management principles and practices to vendor risk assessments.
• Contributing to the assessment of completeness of vendor data and help in documentation.
• Participating in risk assessments of existing vendors.
• Aiding in gathering due diligence information from current and potential vendors for assessments and completing corresponding documentation and risk summary reports.
• Assisting in performing new and recurring risk assessments, contributing to mitigation plans, and coordinating with internal stakeholders to assign remediation responsibilities.
• Supporting in implementing processes to monitor a vendor’s portfolio using a risk-based approach which includes reviewing vendor-provided System and Organization Control (SOC) reports and assisting in issues management processes to coordinate lists of remediation plans from vendor risk assessments.
• Collaborating with business units in developing and implementing controls to effectively mitigate risks inherent in each vendor relationship.
• Contributing to the administration of issue monitoring and exception tracking, and when necessary, supporting remediation actions to improve overall vendor performance.
• Collaborating effectively with business units and internal stakeholders to enhance the effectiveness of vendor processes and controls.
• Assisting in tracking and preparing reporting for leadership status of risk assessments, risk ratings, and ongoing monitoring.
• Aiding in identifying critical vendors.
• Supporting in the setup of vendor risk management system, as required.
• Performing other tasks as assigned.

Requirements: 

• 1+ years (s) working in vendor management or a similar role.
• Experience assisting in risk assessments of vendors and third parties is desirable.
• Familiarity with SOC reports, penetration testing results, or other security control attestations is an advantage.
• Basic understanding of identifying and writing cyber security risk findings, reports, and summaries.
• Experience working with operational risks across different business units is preferred.
• Excellent communication skills - written and verbal.
• Strong interpersonal relationship skills.
• Ability to assess potential risk and evaluate impact and alternatives.
• Good judgment, decision-making, and critical thinking skills.
• Proficient with Microsoft SharePoint and the Microsoft Office suite of applications including Word, PowerPoint, Excel, Word, PowerPoint, Project, Visio, and Excel.