Location: Concord, MA (Hybrid)
Job Summary:
aPriori is looking for a Third-Party Risk Analyst to evaluate the security posture of our third-party vendors and function as the primary resource for customer questions related to aPriori’s security posture. This role will assess our third-party vendors to verify the existence and effectiveness of controls and identify any vulnerabilities or risks to aPriori, including business disruptions, impact on customers, regulatory concerns, reputational damage, or financial loss.
Additionally, this role will be responsible for responding to customer inquiries to effectively communicate aPriori’s information security principles and standards. This “Customer Trust” function will serve as the sales team’s main point of contact for security related inquiries and will assist by providing responses to our customers to help close requests quickly and efficiently. This unique role will work on challenging projects, make an impact, and provide growth as an experienced analyst.
Responsibilities:
Customer Trust
• Support the sales team by addressing our customers’ security needs, including responding to security questionnaires and evidence requests and joining customer calls for both existing and potential customers.
• Provide security related input on legal agreements during customer contract negotiations.
• Improve and maintain the customer facing security Trust Center within Whistic.
• Create a customer facing security page for our public website.
• Work with the security team to develop and improve upon customer facing security materials, including whitepapers, diagrams, and other commonly requested documentation.
• Compile customer security requirements to help provide input on security features for the product and engineering teams.
• Maintain an internal knowledgebase with up-to-date responses for commonly asked security related questions.
• Meet with the sales team regularly to forecast upcoming requests, set expectations, and enable self-help mechanisms.
• Track and report on any efforts to support remediation of findings.
Third-Party Risk Management
• Manage the Third-Party Management lifecycle from screening, onboarding, assessment, risk mitigation, monitoring, and offboarding.
• Perform risk assessments on new and existing vendors.
• Review evidence received from vendors to ensure the adequacy of controls and provide guidance to aPriori Application Owners.
• Log any control gaps or findings and ensure remediation plans are closed effectively.
• Collaborate on process improvement activities.
• Participate in risk assessment special projects and other assessment related activities.
• Collaborate and provide input into aPriori Policies and Procedures.
• Assist in gathering evidence as needed for audits.
General Security
• Collaborate with the security team, as well as other aPriori teams to learn and become an expert on aPriori’s security practices.
• Stay current with industry trends, emerging threats, and best practices in information security to ensure the organization remains proactive and well-prepared against potential risks.
• Foster a culture of security awareness and accountability throughout the organization.
• Contribute to and achieve business and departmental goals and objectives.
Education and Experience:
• 1-3+ years experience in a similar role, with a strong background in risk assessment, third party risk management, vendor management or related field.
• Knowledge of contract review, data privacy, information security, information technology and business continuity principles.
• Experience with standard assessments (SIG, CAIQ, STAR, etc.)
• Knowledge of security frameworks, standards, and regulations (e.g., NIST, ISO 27001, SOC 2, GDPR, etc).
• Experience with security tools and technologies, such as Whistic, Anecdotes, Rapid 7, etc.
• Strong attention to detail and analytical and problem-solving skills, with the ability to assess security issues and develop effective solutions.
• Excellent communication and interpersonal skills, with the ability to effectively communicate security-related concepts to technical and non-technical audiences.
• Ability to work independently with minimal supervision.
• Ability to prioritize tasks and projects to meet deadlines.
• Professional certifications are a plus.
aPriori Offers:
A team environment where your experience is valued, your voice is heard, and the work that you do makes an impact for our customers and employees.
aPriori offers competitive compensation and unique benefits including pension match, private medical & dental, flexible time off, aPriori days, and more in a dynamic, growing, innovative environment!
About aPriori:
Founded in 2003, aPriori is disrupting the industry’s status quo with groundbreaking work helping manufacturers digitally transform their businesses. Through our unique, patented, intellectual property, we enable manufacturers to accelerate product design, and bring products to markets faster while providing visibility to the sustainability of their design and manufacturing choices. Our impact is profound - our customers save millions of dollars each year, accelerate time to market, all while creating a better world for future generations. Though we are an established software firm, through our continued growth, we have maintained the dynamic, collaborative nature of a start-up.
With a global presence, including North America, Europe, Asia, and India, we encourage an inclusive work environment and support employees’ growth through education, training, wellness, and other programs. As our greatest asset, employees’ contributions are acknowledged through monthly company-wide meetings, often with promotions and awards. We promote a positive work culture, employee-friendly policies, flexible work schedules, and an additional day off each quarter known as “aPriori Day”.
Interested in joining our team? We continue to build an organization highly talented, self-motivated individuals. Our unique environment empowers employees to bring their best selves each day, asking, “How can I do better?” and then exceeding expectations. We work together towards a common goal. We nurture and celebrate each other’s successes. Employees embrace opportunities to build new skills as well as step into leadership positions where they are supported and mentored by the Senior Leadership team to grow into impactful individual contributor roles or to effectively manage teams. Innovation, adaptability, and a desire to increase your value are essential. If you possess these qualities, we want to hear from you!
aPriori considers all applicants for employment without regard to race, color, religion, national origin, gender, sexual orientation, gender identity or expression, marital status, domestic partner status, civil partnership, pregnancy, age, military veteran status, or disability.
UK candidates- GDPR Notice:https://www.apriori.com/privacy-policy/
US candidates- CCPA Notice: https://www.apriori.com/california-privacy-policy/
