Risk Analyst Lead

Work Place Flexibility: Hybrid 

Legal Entity: Entergy Services, LLC 

JOB SUMMARY/PURPOSE

The Risk Analyst Lead is responsible for assisting with the implementation and monitoring of Entergy’s vendor management processes.  They are responsible for verification and audit of security controls for third-party vendors and internal Entergy projects. They perform assessments, verifications, reviews and audits of security/privacy control reports and overall security/privacy stance across the enterprise, including vendors and third-party relationships. They conduct security testing and evaluations of system security controls (production and project) as necessary.

The Risk Analyst Lead works directly with all lines of business to track vendor review requests, gather data on the vendors and reports out to management on the status of these requests.  They will also assist the CSO department to raise employee awareness of security risks and methods to protect company critical infrastructure, data and assets. This role drives security control objectives to mitigate the risk from existing and evolving vulnerabilities and threats for on-site, off-shore and cloud solutions.

 

JOB DUTIES/RESPONSIBILITIES

1. Tracks Vendor Assessment Review Requests and communicates status to requestors
2. Reviews assessment reports against asset control objectives to determine effectiveness
3. Completes vendor risk assessments (vendor assessments, supply chain assessments, etc.) as necessary
4. Reports out on control testing through Controls Dashboard
5. Prepares summary and detailed reports on vendor risk across the enterprise
6. Provides guidance to the business to ensure requirements of the VRM program are fully understood.
7. Present reports of high-risk vendor contracts and procurement high risks / ineffective controls and highlights vendor risks and the action planned to address inadequate controls to executive management
8. Lead assessment of vendor risks, develop mitigation plans and partner with internal stakeholders to assign monitoring responsibility
9. Partner with Business Units & internal support functions to help ensure that all risk assessment and mitigation requirements have been met
10. Perform data analytics & reporting activities.  Provide & maintain vendor risk reporting mechanisms, and track and report outcomes from vendor management activities. Collect, organize, and distribute reports & documents & recommend enhancements to reporting & audit tools
11. Analyze, update, and modify procedures and processes to identify and continuously implement vendor risk management process improvements
12. Stay informed about the latest developments in the vendor risk management field

 

MINIMUM REQUIREMENTS

Minimum education required of the position

Bachelor’s degree in Business, Computer Science or related field, or equivalent work experience

 

Minimum experience required of the position

5+ years of experience in internal or external auditing, security testing, or risk management and analysis

3+ general IT experience

3+ years of IT security or IT risk management experience

 

Minimum knowledge, skills and abilities required of the position

• Excellent problem-solving and decision making ability
• Excellent written and verbal communication skills
• Excellent technical documentation skills
• Professional demeanor, exceptional interpersonal skills, including teamwork, facilitation and negotiation
• Team player, highly collaborative, able to work cross-functionally
• Resourceful and self-motivated, able to work independently when required
• Able to lead teams of up to five individuals in Assessments and cross-functional activities
• Broad breadth of t