Cybersecurity Sr. Risk Analyst — ServiceNow / Vendor Risk Management

Title: Cybersecurity Sr. Risk Analyst — ServiceNow / Vendor Risk Management

Duration: 12 Months + Possible Extension/ FTE

Location: North Chicago, IL, 60064

We're hiring a Cybersecurity Sr. Risk Analyst who blends third-party risk management with

hands-on ServiceNow business analysis. You'll sit on the Vendor Risk Management team, assess

and monitor third-party risk, and act as the bridge between security, business stakeholders, and

technical teams — turning process gaps into platform enhancements.

Responsibilities

• Evaluate, assess, and monitor cybersecurity and third-party vendor risk
• Gather and document business requirements, use cases, user stories, and process maps
• Manage and prioritize enhancement requests through the full solution lifecycle
• Lead UAT — test strategy, test scripts, defect tracking, and validation
• Build metrics, reporting, and dashboards on risk posture and program performance
• Support risk assessments, control evaluations, remediation tracking, and audit requests

Required

• Bachelor's in Information Security, Computer Science, or related field (or equivalent experience)
• 3+ years in cybersecurity risk analysis or a related field
• Business analysis experience — requirements gathering and test case development
• Strong analytical skills; works independently and cross-functionally

Preferred

• ServiceNow (VRM / GRC / IRM modules) or similar vendor management platform
• Understanding of procurement and risk processes
• ISO 27001, SOC 2, HITRUST, FedRAMP, ISO 22301
• Operational experience with GRC toolsets
• CISSP / CISM or similar