Vendor Risk Analyst

Location - Dubai

Key Requirements

• Minimum of 2 years of experience in vendor risk assessment or a similar role, with a focus on information security and IT risk management.

Experience

• in IT audits, cybersecurity, or risk assessments is highly advantageous.
• Strong understanding of information security controls, risk management frameworks (e.g., ISO 27001, NIST, COBIT), and regulatory requirements related to outsourcing and third-party risk management.
• Proven ability to analyze complex documentation and evidence to identify potential risks and control gaps. Comfortable identifying issues, assessing risks, and developing practical remediation plans.
• Effective communicator with the ability to explain complex issues clearly and negotiate risk remediation plans with vendors and stakeholders.
• Excellent attention to detail in assessing evidence and documenting findings.
• Able to work collaboratively in a cross-functional environment, partnering with internal teams and stakeholders to support the third-party risk management objectives.