Overview As Senior Technology Audit Analyst, you will lead cybersecurity risk assessments for third-party vendors and partners, ensuring security controls and regulatory compliance. You will review security documentation and audit reports, and translate findings into risk-based mitigations. You'll work across security, procurement, legal, compliance, and business teams to strengthen CHR's third-party risk program and protect assets. This role combines hands-on assessment, data-driven analysis, and collaboration to improve vendor risk management at scale. You'll help shape secure partnerships and advance audit innovation through automation and analytics.
Compensation / Benefits- Health plans including multiple medical options
- 401(k) with company match
- Paid time off and holidays
- Paid parental leave
- Flexible time off and floating holidays
- Employee stock purchase plan
Responsibilities- Conduct cybersecurity assessments of third-party vendors to evaluate security controls, risks, and compliance with organizational standards
- Review security documentation, certifications, audit reports, and policies to validate vendor security posture
- Assess risks related to data protection, regulatory compliance, access management, and service delivery, and provide mitigation recommendations
- Support vendor due diligence and onboarding by identifying security requirements and recommending risk-based approvals
- Track remediation efforts for identified security gaps and validate the effectiveness of corrective actions
- Collaborate with procurement, legal, compliance, privacy, and business stakeholders to manage and communicate third-party cybersecurity risks
- Advance audit innovation by leveraging automation, analytics, and (where appropriate) AI
Key requirements- 4+ years of experience with auditing or related risk management experience
- Minimum 2-3 years of experience conducting cybersecurity assessments within an enterprise technology environment
- Experience reviewing SOC 2 reports
- Ability to work independently with strong ownership and accountability
- Demonstrated ability to work with large data sets including analyzing, filtering, comparing, data validation, and risk-based sampling
- Demonstrated ability to document and review audit test procedures in detailed, high-quality work papers
- Bachelor's degree or minimum of 4 years of equivalent work experience and high school diploma/GED
- Strong written and verbal communication skills with the ability to assess senior audiences and adjust content, style, and approach
- Experience leading meetings and balancing multiple viewpoints from stakeholders
- Relationship management and cross-organizational collaboration
- Auditing and risk management
- SOC 2 review experience
- Data analysis and risk-based sampling
