Security Risk Analyst

Role Overview

The Cybersecurity Risk Analyst will manage and improve McAfee’s Third Party Risk Management (TPRM) program by carrying out vendor risk evaluations, assisting with onboarding and offboarding vendors, tracking third-party risk posture, and ensuring risks are identified and handled according to McAfee’s cybersecurity and compliance standards.

The primary objective of this role is to guarantee that third-party engagements do not expose McAfee, its customers, or regulatory standing to unacceptable risks.

This role is hybrid with presence required occasionally onsite at either Dublin or Cork locations in Ireland. Candidates must reside within commuting distance as relocation support is not provided.

Key Responsibilities

• Perform comprehensive risk assessments for both new and current third-party vendors consistent with McAfee’s risk methods and control prerequisites.
• Assist in vendor onboarding and offboarding while ensuring adherence to security and compliance protocols throughout vendor lifecycle.
• Assess vendor security status by analyzing security questionnaires, audit documents like SOC 2 and ISO 27001 certifications, and additional proof.
• Record and manage third-party risks in the risk register, making sure that responsibilities, mitigation plans, and audit trails are clear and maintained.
• Oversee remediation efforts and the execution of risk mitigation strategies for prompt resolution of vendor risks.
• Execute continuous monitoring of third-party risks through external intelligence such as security ratings and breach alerts.
• Collaborate with Legal, Privacy, and Procurement to ensure risk decisions and contractual terms, including security clauses and data processing agreements, are appropriate.
• Support due diligence inquiries from customers and partners regarding third-party risk controls and assurances.
• Generate and maintain reporting on third-party risk status via KRIs, KPIs, and metrics for leadership and governance oversight.
• Contribute to the ongoing enhancement of TPRM policies, standards, and workflow processes.

Candidate Profile

• Hands-on experience with Third-Party Risk Management or cybersecurity risk assessment.
• Skilled in conducting risk assessments and evaluating vendor security questionnaires.
• Familiarity with SOC 2, ISO 27001 audits, and cybersecurity frameworks such as NIST.
• Proficient in managing risk registers, tracking vendor remediation, and monitoring risks effectively.
• Understanding of security, compliance, and data privacy frameworks.
• Strong analytical thinking, problem-solving, and ability to manage multiple stakeholders.
• Excellent communication skills, both written and verbal.
• Preference given to candidates with experience using GRC or TPRM software tools.
• A bachelor’s degree in Cybersecurity, Information Security, Computer Science, or equivalent experience.
• Certifications such as CISSP, CISM, CRISC, CISA, or Security+ are advantageous.

About McAfee

McAfee is a global leader in consumer security, focusing on safeguarding people beyond just their devices by providing adaptive and integrated security solutions that protect families and communities in today's always-connected environment.

Benefits and Culture

McAfee is committed to diversity and inclusion and fosters a supportive atmosphere where employees can be themselves, feel valued, and grow to their full potential. The organization is recognized as a Great Place to Work® in numerous countries.

• Bonus program
• Pension and retirement plan options
• Medical, dental, and vision insurance coverage
• Paid time off
• Paid parental leave
• Support for community engagement

Equality and Privacy

McAfee strictly prohibits any discrimination based on legally protected attributes like race, gender, religion, age, disability, and more.

A Job Applicant Privacy Notice is available for applicants residing in California.