ZipRecruiter

Log In

2

Remote Vendor Risk Analyst Jobs in Lincoln, NE (NOW HIRING)

penlink

Senior GRC Officer

Lincoln, NE · On-site +1

It sounds like a lot of data and analytics, but really, it's about improving the world and keeping ... Own risk management, vendor risk assessment, policy governance, access review, and exception ...

Ameritas

Lead Financial Reporting Analyst

Lincoln, NE · On-site +1

... risk management across the organization. • This is a hybrid role working partially in-office ... This role may be remote within the US. What you do: * Lead Statutory and GAAP accounting and ...

NTT DATA Services

BPO Director

Lincoln, NE · Remote

Strong vendor management, negotiation, and relationship-building expertise. * Excellent analytical ... Remote Working and Technology Requirements To work remote, individuals must meet all the ...

NTT DATA Services

BPO Director

Lincoln, NE · Remote

Strong vendor management, negotiation, and relationship-building expertise. * Excellent analytical ... Remote Working and Technology Requirements To work remote, individuals must meet all the ...

micro1 AI

Clinical Pharmacy Technicians

Lincoln, NE · Remote

$70 - $80/hr

Remote micro1 is engaging Pharmacovigilance Experts to contribute their advanced drug safety ... benefit-risk conclusions in alignment with best practices. * Assess template and structural ...

micro1 AI

Pharmacovigilance Expert

Lincoln, NE · Remote

$70 - $80/hr

Remote micro1 is engaging Pharmacovigilance Experts to contribute their advanced drug safety ... benefit-risk conclusions in alignment with best practices. * Assess template and structural ...

Hilgers PLLC

Commercial Litigation Paralegal

Lincoln, NE · Remote

$80K - $110K/yr

Remote - US, TX, FL, CA This full-time Commercial Litigation Paralegal role supports attorneys ... Analyze judicial decisions, statutes, and codes to support attorney strategies and briefs * Assist ...

Bryan Health

Cardiac Device Specialist

Lincoln, NE · Remote

Performs and evaluates in-clinic and remote monitoring, including analyzing rhythm strips for ... Contacts appropriate personnel/vendor when a device problem is identified and needs follow-up. * *

Ameritas

Assistant Actuary

Lincoln, NE · On-site +1

This position can be hybrid or can be remote (within the U.S.A.) based on proximity to an office ... risk assessments; serve as the primary actuarial source for VM-20 reserve attribution analysis ...

Ameritas

Manager, Investment Operations

Lincoln, NE · On-site +1

This role can be hybrid (Lincoln, NE or Cincinnati, OH) or fully remote for the right candidate ... risk, and improve the overall processing experience. * Produce and analyze operational and ...

All JobsVendor Risk Analyst JobsRemote Vendor Risk Analyst JobsRemote Vendor Risk Analyst Jobs in Lincoln, NE

Remote Vendor Risk Analyst information

See Lincoln, NE salary details

$13

$35

$57

How much do remote vendor risk analyst jobs pay per hour?

As of Aug 18, 2026, the average hourly pay for remote vendor risk analyst in Lincoln, NE is $35.25, according to ZipRecruiter salary data. Most workers in this role earn between $25.96 and $42.88 per hour, depending on experience, location, and employer.

What are popular job titles related to Remote Vendor Risk Analyst jobs in Lincoln, NE?

For Remote Vendor Risk Analyst jobs in Lincoln, NE, the most frequently searched job titles are:

What job categories do people searching Remote Vendor Risk Analyst jobs in Lincoln, NE look for?

The top searched job categories for Remote Vendor Risk Analyst jobs in Lincoln, NE are:

Remote Vendor Risk Analyst jobs near you

Senior GRC Officer

penlink

Lincoln, NE • On-site, Remote

Full-time

Posted 12 days ago

Job description

Description
Penlink is a technology company bringing clarity to complex data for people who need it now. We partner with law enforcement agencies across the United States, offering a software solution to manage data and aid investigators solving crimes. It sounds like a lot of data and analytics, but really, it's about improving the world and keeping safe the places we call home.
We focus on creating products that positively impact our communities and being "in the mission" and less about the laidback culture and amazing benefits - even though we offer those too. With our get it done attitude and focused mission we are growing at an unprecedented rate and are therefore seeking a Senior GRC Officer to join our global Security and Compliance team. This role will independently manage substantial portions of Penlink's U.S. governance, risk, and compliance program, initially as our sole dedicated U.S.-based GRC professional while remaining fully integrated into the global Security and Compliance team. You'll personally drive the work rather than operate solely in an oversight capacity, taking hands-on, day-to-day ownership of assigned FedRAMP, CMMC, and other compliance workstreams - coordinating with technical teams, auditors, and business stakeholders from planning through evidence collection, assessment, remediation, and ongoing monitoring.
YOUR RESPONSIBILITIES
  • Independently manage assigned governance and compliance workstreams across FedRAMP, CMMC Level 2, SOC 2 Type 2, ISO 27001, TX-RAMP Level 2, and CJIS, including full FedRAMP workstreams from readiness through Agency ATO.
  • Lead development and quality review of core compliance documentation (SSP, POA&M, control narratives, policies, procedures, and readiness artifacts) and serve as the primary day-to-day contact for 3PAO/C3PAO assessors, consultants, and control owners.
  • Coordinate implementation and validation of NIST SP 800-53 and CMMC security requirements across engineering, cloud, IT, and product teams; build and maintain organized evidence repositories and continuous monitoring processes.
  • Own risk management, vendor risk assessment, policy governance, access review, and exception management, including leading the Cloud Vulnerability Task Force.
  • Plan and support external audits, assessments, and certification programs, and prepare responses to customer security questionnaires, RFIs/RFPs, and regulatory inquiries.
  • Prioritize multiple concurrent workstreams, track remediation progress, identify blockers, escalate risks, and provide clear status reporting to management and stakeholders.
  • Conduct internal compliance assessments and gap analyses, recommending and validating remediation actions.
  • Serve as a trusted security and compliance point of review, providing guidance and risk-based approval recommendations for business, technology, and operational processes to ensure security requirements, risks, and control expectations are considered before implementation.

Requirements
YOUR COMPETENCIES & EXPERIENCE
  • 5+ years of hands-on experience in governance, risk, compliance, or information security within a SaaS, cloud, technology, or regulated environment.
  • Direct practical experience supporting or managing substantial FedRAMP workstreams (SSP development, POA&M management, control implementation, evidence collection, assessment preparation, and remediation tracking).
  • Strong working knowledge of NIST SP 800-53 security controls and the ability to interpret requirements for both technical and business stakeholders.
  • Proven ability to independently manage compliance, audit, or certification workstreams with limited day-to-day supervision, including conducting risk assessments and internal compliance gap analyses.
  • Experience coordinating with external assessors, auditors, consultants, control owners, and senior business stakeholders.
  • Strong experience developing, maintaining, and quality-reviewing compliance documentation, policies, procedures, and evidence repositories.
  • Experience managing multiple concurrent workstreams, prioritizing competing requirements, identifying blockers, escalating risks, and providing clear status reporting to stakeholders.
  • Strong written and verbal communication skills, including the ability to explain complex security and compliance requirements clearly to both technical and non-technical audiences.
  • A proactive, hands-on, and delivery-focused working style, with demonstrated ability to identify required next steps, take ownership, follow through on commitments, and maintain momentum without continuous direction.
  • Ability to work effectively as part of a global team while initially operating as the sole dedicated GRC professional based in the United States.
  • Experience coordinating vulnerability remediation activities, including prioritization, assignment, tracking, escalation, and validation of remediation evidence.
  • U.S. citizenship required.
  • Experience with CMMC Level 2, SOC 2 Type 2, ISO 27001, TX-RAMP, or CJIS frameworks is nice to have.
  • Prior security operations or vulnerability management experience, including familiarity with AWS or Azure cloud security controls is preferred.
  • Experience with GRC platforms, compliance automation tools, and responding to customer security questionnaires or RFIs/RFPs.
  • Relevant certifications such as CISSP, CISM, CISA, CRISC, CCSP, PMP, CAP, or CMMC-related credentials is preferred but not required

This position currently follows a hybrid schedule requiring two days per week in our Lincoln, Nebraska office. Onsite requirements may be adjusted based on business needs and company or departmental policy.

Apply