Senior Cyber Risk Analyst — Hybrid

Job overview

The Senior Cyber Risk Analyst role is hybrid, with onsite work three days per week, for candidates local to Columbus, OH, or Merrillville, IN. Compensation is $46–$52 per hour. The role supports a third-party risk management and cyber-assessments program in a large utility environment. The role exists to assess and manage cybersecurity risks from suppliers and vendors and to help stakeholders make informed risk decisions. It contributes across cybersecurity, supply chain, IT, operational technology, compliance, audit, and business teams, supporting vendor assessments, remediation tracking, reporting, and GRC platform use.

What you'll do

• Perform third-party cybersecurity and vendor control assessments
• assess inherent risk and evaluate controls
• maintain vendor risk profiles
• document and track findings, exceptions, and remediation
• review SOC 2 reports and security documentation
• maintain assessment information in Archer GRC
• support Fortress assessments
• develop risk reports and dashboards
• coordinate with business owners and vendor managers
• support onboarding, renewals, continuous monitoring, audit, and compliance activities.

What we're looking for

Skills & competencies

senior cyber risk analyst

hybrid

columbus oh or merrillville in

$46–$52 per hour

third-party risk management

vendor cyber assessments

soc 2

archer grc

fortress

nist cybersecurity framework

u.s. citizens only

onsite three days per week

Work arrangement

• Weekend coverage required

Why this role

Requires 6+ years of third-party risk management and vendor assessment experience, including SOC 2, risk reporting, and metrics. U.S. citizenship and local availability in Columbus or Merrillville are required; no visa sponsorship. Contract-to-hire, W-2 only; contract dates November 16, 2026–November 15, 2027.

About the employer

Blue Star Partners LLC is hiring for this role. Industry: Natural Gas Distribution. Sector: 22.