Entry Level Third Party Risk Analyst Jobs in Portland, OR

The Cybersecurity Analyst performs actions in each of the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) categories of Identify, Protect, Detect, Respond and Recover that contribute to overall cyber risk reduction for the agency. Example actions include, but are not limited to, enterprise vulnerability management, third party risk management, managing reported and detected phishing emails, and interfacing with TriMet's Managed Detection and Response (MDR) services.

A majority of the functions performed include documented security operation aspects of Center for Internet Security (CIS) Controls that are built into the agency's Information Technology (IT) and Operational Technology (OT) implementation and ongoing operations. Activities also include assisting IT and other Divisions in the implementation of the CIS Controls as directed. This role provides Tier 1 support for cybersecurity issues within the agency.

This role requires being onsite three (3) days per week.

Ensure a commitment to safety and regulatory compliance through effective leadership, training, role modeling and implementing practices that demonstrate safety is a fundamental value and a priority in all aspects of work.

Serve as a good steward of TriMet by regularly utilizing our transit system to maintain a strong and current understanding of customers’ experiences and of TriMet’s product and service offerings.

1. Perform documented processes leveraging hardware and software tools maintained and operated by the IT Cybersecurity Team in support of Information Technology (IT) and Operational Technology (OT) security functions.
2. Responsible for investigating reported security events and escalating when appropriate.
3. Perform documented Risk Management functions including on risk assessments of new vendors and ongoing Third Party Risk Management (TPRM).
4. Review all incoming service requests for the Cybersecurity Team assign to team member based on assigned responsibilities,
5. Assist with multiple cybersecurity related projects and initiatives.

A Bachelor's Degree is required.

A Bachelor's Degree in Information Systems, Computer Science, or Information Security is preferred.

A minimum of two (2) years total credited experience.*

Six (6) months of cybersecurity experience are required.

Six (6) months of exposure to National Institute of Standards and Technology (NIST), Cybersecurity Framework (CSF) and/or Center for Internet Security (CIS) Controls are preferred.

Or any equivalent combination of training or experience.

*The amount of credit a candidate receives for prior years of experience is based on the relevancy of that experience to the required or preferred prerequisites of the job description. Experience is prorated based on hours worked. LRHR assigns and validates the "credited experience".

Grade 14, Exempt, Non-Union, Full-Time.

Minimum: $88,247.00/year

Maximum: $132,372.00/year

Salary offers will be determined by a candidate's education, training and relevant experience. A complete work history will be required for this purpose at the time of offer; any omitted work history will not be considered after hire. Any final offer of employment will fall within the range stated above. For transparency, we choose to list the full available grade range, however, TriMet's salary administration process will ultimately determine the final salary offered.

1. Application Review (an up-to-date resume is required)
2. Panel Interview
3. Reference Check and Degree Verification

TriMet is an equal opportunity employer, committed to developing an organization that is reflective of and sensitive to the needs of the diverse community we serve, including veterans, the elderly, and individuals with disabilities.

As applied to the workplace, applicants and employees must be qualified to perform the essential functions of the job with or without reasonable accommodation. Essential functions may include required job functions performed infrequently as well as production standards related to the quality and quantity of work. If a person with a disability could meet job qualifications with a reasonable accommodation, TriMet will work with the employee to accommodate the need. If TriMet's accommodation is effective in allowing the employee to perform the essential functions of the job, it need not be the employee's preferred accommodation.