Location: Concord, MA (Hybrid)

Job Summary: 
aPriori is looking for a Customer Trust/Third-Party Risk Analyst to evaluate the security posture of our third-party vendors and function as the primary resource for customer questions related to aPriori’s security posture. This role will assess our third-party vendors to verify the existence and effectiveness of controls and identify any vulnerabilities or risks to aPriori, including business disruptions, impact on customers, regulatory concerns, reputational damage, or financial loss.  

Additionally, this role will be responsible for responding to customer inquiries to effectively communicate aPriori’s information security principles and standards. This “Customer Trust” function will serve as the sales team’s main point of contact for security related inquiries and will assist by providing responses to our customers to help close requests quickly and efficiently. This unique role will work on challenging projects, make an impact, and provide growth as an experienced analyst.

Responsibilities:
Customer Trust
•    Support the sales team by addressing our customers’ security needs, including responding to security questionnaires and evidence requests and joining customer calls for both existing and potential customers. 
•    Provide security related input on legal agreements during customer contract negotiations.
•    Improve and maintain the customer facing security Trust Center within Whistic.
•    Create a customer facing security page for our public website.
•    Work with the security team to develop and improve upon customer facing security materials, including whitepapers, diagrams, and other commonly requested documentation.
•    Compile customer security requirements to help provide input on security features for the product and engineering teams.
•    Maintain an internal knowledgebase with up-to-date responses for commonly asked security related questions. 
•    Meet with the sales team regularly to forecast upcoming requests, set expectations, and enable self-help mechanisms.
•    Track and report on any efforts to support remediation of findings.
Third-Party Risk Management
•    Manage the Third-Party Management lifecycle from screening, onboarding, assessment, risk mitigation, monitoring, and offboarding. 
•    Perform risk assessments on new and existing vendors.
•    Review evidence received from vendors to ensure the adequacy of controls and provide guidance to aPriori Application Owners.
•    Log any control gaps or findings and ensure remediation plans are closed effectively.
•    Collaborate on process improvement activities. 
•    Participate in risk assessment special projects and other assessment related activities.
•    Collaborate and provide input into aPriori Policies and Procedures.
•    Assist in gathering evidence as needed for audits.
General Security
•    Collaborate with the security team, as well as other aPriori teams to learn and become an expert on aPriori’s security practices.
•    Stay current with industry trends, emerging threats, and best practices in information security to ensure the organization remains proactive and well-prepared against potential risks.
•    Foster a culture of security awareness and accountability throughout the organization.
•    Contribute to and achieve business and departmental goals and objectives.

Education and Experience:
•    1-3+ years experience in a similar role, with a strong background in risk assessment, third party risk management, vendor management or related field.
•    Knowledge of contract review, data privacy, information security, information technology and business continuity principles.
•    Experience with standard assessments (SIG, CAIQ, STAR, etc.) 
•    Knowledge of security frameworks, standards, and regulations (e.g., NIST, ISO 27001, SOC 2, GDPR, etc).
•    Experience with security tools and technologies, such as Whistic, Anecdotes, Rapid 7, etc.
•    Strong attention to detail and analytical and problem-solving skills, with the ability to assess security issues and develop effective solutions.
•    Excellent communication and interpersonal skills, with the ability to effectively communicate security-related concepts to technical and non-technical audiences. 
•    Ability to work independently with minimal supervision.
•    Ability to prioritize tasks and projects to meet deadlines.
•    Professional certifications are a plus.

aPriori Offers:
A team environment where your experience is valued, your voice is heard, and the work that you do makes an impact for our customers and employees.  
aPriori offers competitive compensation and unique benefits including pension match, private medical & dental, flexible time off, aPriori days, and more in a dynamic, growing, innovative environment!