Third Party Security Risk Analyst

The successful candidate will strengthen Fluence's third-party security risk management program by assessing new and current vendors continuously to rigorous security assessment that address cyber-physical, supply chain, and advanced trust scenarios. This position requires strong expertise in vendor risk management and regulatory compliance frameworks relevant to globalized regions.

• Bachelor's degree in Information Security, Cybersecurity, Risk Management, Information Technology, or a related field. Equivalent relevant experience will be considered.
• Minimum of 5 years of experience in cybersecurity risk management, supplier security, vendor risk, audit, compliance, or a related field, with experience supporting third-party risk assessments.
• Strong understanding of cybersecurity risk management principles, security controls, and common assessment practices.
• Knowledge of relevant frameworks and standards such as NIST, ISO/IEC 27001, and IEC 62443 is preferred.
• Ability to analyze security documentation, identify control gaps, document risk clearly, and recommend practical remediation actions.
• Excellent analytical, problem-solving, written communication, and interpersonal skills.
• Ability to work collaboratively with technical teams, procurement, legal, audit, business stakeholders, and external vendors.
• Experience with third-party risk management platforms such as UpGuard, ServiceNow, Aravo, or Archer is preferred.
• Relevant certifications such as CRISC, CISSP, CISM, or comparable risk and security certifications are preferred.
• Experience developing reports, dashboards, workflow automation, or data-driven risk metrics is preferred.
• Experience with vendor risk management and principles for embedded components in OT environments.
• Perform third party risk management of vendors continuously.
• Maintain vendor security assessment questionnaires to remain current with global trend in the energy sector.
• Prioritize security remediation with vendors to improved trust transparency.
• Manage multiple vendor assessments with JIRA kan-ban boards to ensure accountability.